Desk live·
ForensicPost
Breaches/Identity/File 24-0527

Christie’s Breach Exposed Client ID Document Numbers Over Two Days in May

An unauthorised party accessed Christie’s files on 8 and 9 May 2024 and copied some of them. The auction house settled a class action for $990,000; the exposed fields included identity document numbers.

Constructed geometry · not a chart of case data
JurisdictionUnited KingdomLondonthe affected organisation’s jurisdiction, not the actor’s suspected origin
TargetChristie’s
ActorUnattributed
D. Kennedy8 min readConfidence: high1 source reviewed

Christie’s said an unauthorised actor accessed certain files between 8 and 9 May 2024 and copied some of them. Reported exposed fields include names and identity document numbers. The auction house later agreed a $990,000 class action settlement.

Anti-Money-Laundering Rules Created The Exposure

An auction house holds passport and identity document numbers because it is required to verify who is bidding. The obligation is sound and the consequence is a concentrated store of exactly the documents that cannot be reissued cheaply.

The same structure recurs across the file set: a compliance requirement to collect, no matching requirement to dispose, and a store that outlives the transaction that justified it.

A Two-Day Window Is A Short One

Access spanned 8 to 9 May. Against dwell times measured in months elsewhere in this database, that is fast detection or a fast operation, and either way it bounds what could be taken.

It does not bound the consequence. Identity document numbers copied in two days remain valid for years, and the settlement divides to a small sum per person.

How we reported this

Compiled from the company’s notifications, public reporting and settlement filings, listed below. No affected-client count was published. Corrections: corrections@forensicpost.com.

Sources
  1. $990K Christie’s data breach class action settlementTop Class Actions
D. Kennedy
Identity and access reporter. Former DFIR consultant. Signal on request.
// the chain of custody — tuesdays

Get the next file first.

One incident a week, taken apart properly. Logs, timelines, and what the filing left out.

PGP-signed edition · no tracking pixels · one-click unsubscribe
© 2026 ForensicPost Media · the desk · newsletter · searchGlossary