Uffizi Galleries confirm cyberattack but deny security systems were compromised
Summary
The Uffizi Galleries confirmed a cyberattack but deny their artwork-protection systems were compromised. Italian media alleged hackers accessed IT systems and sought ransom; the museum disputes key claims and says backups restored its server without data loss.
Key points
- The Uffizi confirmed it was subject to a cyberattack but says no artworks were damaged or stolen and its protection systems were not compromised.
- Corriere della Sera reported that hackers accessed connected IT systems at the Uffizi, Palazzo Pitti and Boboli Gardens, allegedly extracting access codes, maps and CCTV and alarm locations.
- The newspaper reported that a ransom demand was sent to director Simone Verde’s personal phone, with a threat to sell the data; the article does not name an attacker.
- The Uffizi says there is no evidence attackers possessed security-system maps and that no passwords or staff phones were compromised.
- The attack reportedly took place on 1 February. The museum says its photographic server was restored from backup and no data was lost.
- The galleries remain open. The Uffizi says security upgrades already in progress were accelerated before and after the attack.
Article Details
- Victim Organization
- Uffizi Galleries
- Incident Type
- Cyber-attack involving reported intrusion into museum IT systems; the Uffizi denied that its security systems were breached.
- Data Types Exposed
- Access codes (allegedly extracted, according to Corriere della Sera)
- Internal maps (allegedly extracted, according to Corriere della Sera)
- CCTV camera and alarm locations (allegedly accessed, according to Corriere della Sera)
- Operational Impact
- The Uffizi said a photographic server was taken down to restore it from a backup and that restoration was complete with no data lost. The galleries remained open, with ticketing and public areas largely unaffected. Corriere della Sera reported some Palazzo Pitti areas had been closed since 3 February; the museum attributed the closure and security changes to planned work and other measures.
- Ransom Or Extortion
- Corriere della Sera reported that a ransom demand was sent to museum director Simone Verde’s personal phone, with a threat to sell data on the dark web. The Uffizi’s confirmation of the cyber-attack did not establish that this demand or data theft occurred.
- Claim Status
- confirmed