After a data security incident that might have affected the user's Artsy account data, Artsy informed its users. The company believed that users’ names, emails, and IP addresses have been among the data stolen. While claiming that the site simply maintains password hashes, the group encouraged users to change their passwords on Artsy as well as other websites that might share similar passwords because there is no proof that any commercial or financial information was compromised. The Artsy data was one of the items taken from 16 websites and offered for sale on the dark web. The report claims that an operation resulted in the theft of information pertaining to a million Artsy accounts.

The California Office of the Attorney General reported a data breach involving Artsy on May 17, 2019. The breach, which occurred on April 30, 2018, resulted in unauthorized access to user account information, including first and last names, emails, IP addresses, and password hashes, potentially affecting unspecified numbers of users.