A cyberattack may have exposed clients sensitive personal information. Register your interest to stay informed and receive updates if this claim is taken forward by one of our partner law firms.
Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.
Register your interest
Overview
In 2024, Christie’s experienced a huge privacy breach. Clients of the auction house – including many high net worth individuals – may now be at risk of scams, ID theft and fraud, after cybercriminals hacked Christie’s systems and allegedly sold off the company’s data to the highest bidder.
The information stolen in the breach came from identification documents, including passports and driving licences, which Christie’s uses for client ID checks. The hackers claimed to have stolen “sensitive personal information” belonging to “at least 500,000 private clients”.
Lawyers in the US have already settled a class-action lawsuit. UK clients also deserve justice and compensation for this security failure.
Christie’s Data Breah– At a glance
Take a moment to answer a few simple questions so we can understand your connection and keep you updated.
Share your details so we can keep you informed if any updates become available.
If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.
April 2026
South Korea’s Personal Information Protection Commission announced separate enforcement action against Christie’s over the same breach, imposing a 280 million won penalty and a further 7.2 million won fine relating to failures in how personal data was protected and stored.
April 2025
Christie’s agreed to a proposed $990,000 settlement to resolve the US data breach litigation, while denying any wrongdoing.
Under the proposed settlement, eligible class members could claim up to $10,000 for documented losses linked to the breach, including fraudulent charges, bank fees and credit monitoring costs. Additional cash payments of around $100 per person were also estimated, with some California residents potentially eligible for an additional statutory payment.
18 November 2024
Christie’s agreed to settle a US class action over the ransomware attack. The lawsuit was paused pending final agreement.
3 June 2024
RansomHub’s website was updated to say the ransom had not been paid and, as a result, the stolen data had been sold to an anonymous third party for an undisclosed sum.
Also on this date, a US class action was filed against the auction house. According to the complaint, Christie’s failed to “properly secure and safeguard sensitive information of its customers.”
9 May 2024
Christie’s experienced a hack by cyber-extortionist group RansomHub. The hackers set a deadline of 3 June for Christie's to pay a ransom in return for the stolen data.
We’ll provide more updates on this case as they happen.
If you are a client of the auction house, you may now be at risk of scams.
Register to stay updated, and we’ll let you know if a partner law firm takes this claim forward.
Christie’s experienced a cybersecurity incident in May 2024. The hackers accessed client names and some other personal identity information. This information has since been sold to an unknown buyer. According to reports least 500,000 Christie’s clients had their sensitive data compromised in the breach.
The personal data came from identification documents, for example, passports and driving licences, provided as part of client ID checks.
A sample of the stolen data, which was leaked online, includes full names, home addresses, nationalities, and data from identification documents.
Around 500,000 people are said to be affected by the Christie’s data breach, including many in the UK. Christie’s said it has written to all affected clients. If you have received this notification, you could qualify for a Christie’s data breach group action claim.
We cannot say how much compensation you might get if you win a Christie’s data breach case. Each claim is based on its merits and your solicitor will work to get the compensation owed to you.
In the UK, if a group of people have experienced loss, or otherwise been harmed by an organisation’s law breaking, they can come together to fight for justice. Levelling the playing field when standing up to big businesses, group actions prove that there is strength in numbers. At Join the Claim, we bring consumers and law firms together to ensure these group actions are as powerful as possible.
No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part.
A no-win, no-fee agreement means you don’t pay your solicitor’s legal fees if your claim is unsuccessful. This makes it easier and more affordable to take part in group litigation. However, T&Cs apply.
Want the full picture, including what to check before signing? Read our complete guide to no win, no fee agreements here.
No, we’re not a law firm. We help individuals find and join group action claims being run by our partner UK law firms.
We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.
We connect consumers with their legal dream teams to ensure they get the compensation and support they deserve.
Join the Claim is not a law firm. We connect individuals with top law firms for group or individual claims, and our service is free to use. While we may receive a fee from the law firms we introduce you to, this will not affect your costs or compensation. We are not responsible for the advice or services provided by these firms. Please note, nothing on this website is legal advice, and while we check claim eligibility, we cannot guarantee a law firm will accept a case.
Join the Claim is a trading name of Join the Claim Limited, authorised and regulated by the Financial Conduct Authority (FRN: 1053404). Registered in England and Wales, Company No: 16245278. Registered office: 32 Eyre Street, Sheffield, S1 4QZ.
© Join the Claim All Rights Reserved |
