Sotheby’s International Investigates Cybersecurity Incident Involving Client Data Luxury real estate firm Sotheby’s International is probing a cybersecurity incident involving unauthorized access to a third-party marketing platform containing client contact information. The breach, discovered recently, targeted a system used to store names, addresses, email addresses, and phone numbers. In a statement, Sotheby’s confirmed that no financial transaction data, property documentation, or email exchanges were compromised. The company acted swiftly to contain the incident and engaged forensic investigators to assess the scope. While the attacker claimed to have accessed 1.6 million contacts, Sotheby’s refuted this, stating the figure included duplicate entries in its database. New Zealand managing director Mark Harris acknowledged the breach, emphasizing the firm’s commitment to transparency and client trust. He noted that while most exposed data was limited to basic contact details, some sensitive information stored in open-text notes fields may have been accessed. Affected individuals will be contacted directly. Sotheby’s continues to work with cybersecurity specialists to secure client data and will provide updates as the investigation progresses.

Anywhere Real Estate Hit by Clop Ransomware Attack, Exposing 17,429 Customers In August, Anywhere Real Estate disclosed a data breach affecting 17,429 customers, following an attack by the Clop ransomware gang. The cybercriminals infiltrated the company’s Oracle E-Business Suite environment, accessing and potentially exfiltrating sensitive customer data. A breach notification filed with the Maine Attorney General’s Office confirmed the incident, though details on the exact nature of the compromised information remain limited. Clop, a well-known ransomware and extortion group, has been linked to multiple high-profile attacks, often targeting vulnerabilities in enterprise software. The breach at Anywhere Real Estate parent company of brands like Coldwell Banker, Century 21, and Sotheby’s International Realty highlights the growing threat to real estate and mortgage sectors, where vast amounts of personal and financial data are stored. The company has since notified impacted individuals, but the full scope of the breach’s consequences including potential identity theft or fraud remains unclear. This incident follows a broader trend of cyberattacks on real estate firms, underscoring the industry’s vulnerability to sophisticated ransomware operations.