Sotheby's Data Breach: Your Information Exposed in 2025
Sotheby's confirmed a data breach in New Hampshire as of October 2025, meaning personal information was compromised. If you received a notification letter, your data was likely exposed, and you may be eligible to explore your legal options.
This breach is real, not a scam. Sotheby's officially reported it to the New Hampshire Attorney General on October 15, 2025.
Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278
Received a Sotheby's notification letter? Find out in minutes if you qualify for compensation.
Free case review- State
- New Hampshire
- Reported
- October 15, 2025
Sotheby's, the renowned auction house and luxury marketplace, officially reported a data security incident to the New Hampshire Attorney General's office on October 15, 2025. This notification confirms that unauthorized parties may have gained access to internal systems, potentially compromising sensitive client data. If you received a formal breach notification letter from Sotheby's, it indicates that your personal information was likely among the affected files.
While the specific nature of the exposed data has not been detailed, Sotheby's typically collects highly personal and comprehensive information from its clients for high-value transactions, bidding processes, and authentication. This includes contact records and other sensitive personal information. The exposure of such information could lead to various risks, including identity fraud or targeted scams.
For those affected, reviewing your data breach notification letter from Sotheby's is a crucial first step. The letter should outline any identity protection services offered by the company. It is also wise to remain vigilant for unusual activity on your financial accounts and to monitor credit reports carefully in the coming months.
Many individuals who receive these letters are left wondering about the full impact and what recourse they have. If your personal information was exposed in the Sotheby's breach, you may have legal rights to pursue compensation. Our team offers a free, no-obligation case review to help you understand your potential claims, with no attorney fees unless we recover for you.
Received the Sotheby's notification letter? The Sotheby's case file tracks this filing.
What to do if you were affected
These general steps can help limit the risk of identity theft and fraud after any data breach.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Sotheby's data breach settlement, compensation and claim questions
- How much could a Sotheby's data breach settlement or claim be worth?
- There is no set amount, and no Sotheby's settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. Keep receipts and records; they're what damages claims are built on.
- Is there a Sotheby's data breach class action lawsuit?
- Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Sotheby's. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
- Can I sue Sotheby's over the data breach?
- It depends on what was exposed, the law in New Hampshire and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
- Did Sotheby's offer free credit monitoring?
- Look for an enrollment code in your Sotheby's notice. Companies that offer free credit monitoring after a breach usually include it there, with a deadline to activate. Signing up doesn't waive any legal rights you may have.
- Is the Sotheby's data breach letter legit or a scam?
- A notice from Sotheby's in the mail matches the breach Sotheby's reported to the New Hampshire Attorney General on October 15, 2025. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Sotheby's through a phone number or website you find yourself.
- Do I need a Sotheby's data breach lawyer or attorney?
- A data breach lawyer can tell you whether your situation supports a claim and what it may be worth. A review here is free, and law firms usually take these cases on contingency, so there is no upfront cost.
- What should I do after getting the Sotheby's data breach notice?
- Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Related data breach cases
- Janome America, Inc.
- Sullivan Environmental Services
- City of New Britain, Inc.
- New Hampshire Housing Yardi’s RentCafe
- Pocket FM
- Ameriprise Financial
- Joyal Financial Management Group
- Quantum Health
- Wei Wei & Company
- Werth Wealth Management, LLC
- HCA Healthcare, Inc.
- Alabama Symphonic Association Inc.
- Foster & Eldridge LLP
- Tombigbee Healthcare Authority dba Whitfield Regional Hospital