The Uffizi Galleries in Florence have confirmed they were subject to a cyber-attack - but denied that the security systems protecting their famous works had been compromised. The Uffizi stressed that nothing had been either damaged or stolen, after hackers were reported to have infiltrated the museum's IT systems and accessed sensitive security data.
Italian newspaper Corriere della Sera reported that hackers had infiltrated the museums' IT systems, allegedly extracting access codes, internal maps, and the locations of CCTV cameras and alarms, before issuing a ransom demand. But the Uffizi contested this account, stating its security systems were inaccessible from the outside. The attackers appeared to have moved through interconnected systems, computers, and phones, gradually piecing together a detailed picture of the museum's operations, Corriere reported.
A ransom demand was later sent to museum director Simone Verde's personal phone, with a threat to sell the data on the dark web. The Uffizi is home to celebrated artworks like Botticelli's Birth of Venus and Primavera. The cyber-attack reportedly occurred between late January and early February, affecting other sites like Palazzo Pitti and the Boboli Gardens. The museum clarified the hack happened on 1 February.
Following a notorious heist at the Louvre, major museums are reassessing their security. The Uffizi stated work to improve security both before and after the attack had accelerated, highlighting that their situation was not comparable to the Louvre's. New security measures included replacing analogue cameras with digital systems, following recommendations by police in 2024.
The Uffizi refuted claims of theft regarding the location and data about its security systems, reassuring that no maps were stolen, as these areas are publicly visible. They confirmed that no passwords were compromised because security measures are entirely internal. Despite the incident, Italy's second-most visited museum continues to operate normally, generating around €60 million annually, with public areas largely unaffected.
Italian newspaper Corriere della Sera reported that hackers had infiltrated the museums' IT systems, allegedly extracting access codes, internal maps, and the locations of CCTV cameras and alarms, before issuing a ransom demand. But the Uffizi contested this account, stating its security systems were inaccessible from the outside. The attackers appeared to have moved through interconnected systems, computers, and phones, gradually piecing together a detailed picture of the museum's operations, Corriere reported.
A ransom demand was later sent to museum director Simone Verde's personal phone, with a threat to sell the data on the dark web. The Uffizi is home to celebrated artworks like Botticelli's Birth of Venus and Primavera. The cyber-attack reportedly occurred between late January and early February, affecting other sites like Palazzo Pitti and the Boboli Gardens. The museum clarified the hack happened on 1 February.
Following a notorious heist at the Louvre, major museums are reassessing their security. The Uffizi stated work to improve security both before and after the attack had accelerated, highlighting that their situation was not comparable to the Louvre's. New security measures included replacing analogue cameras with digital systems, following recommendations by police in 2024.
The Uffizi refuted claims of theft regarding the location and data about its security systems, reassuring that no maps were stolen, as these areas are publicly visible. They confirmed that no passwords were compromised because security measures are entirely internal. Despite the incident, Italy's second-most visited museum continues to operate normally, generating around €60 million annually, with public areas largely unaffected.
