Surinametimes Uffizi Galleries Confirms Cyber-Attack, Denies Security Breach
Article Content
- •Uffizi Galleries confirmed a cyber-attack but reported no theft or damage.
- •Hackers accessed sensitive data and issued a ransom demand to the museum director.
- •The museum's security systems are closed-circuit, preventing external access.
The Uffizi Galleries in Florence confirmed a cyber-attack occurred between late January and early February 2026, affecting its IT systems but denying any damage or theft of artworks. Hackers reportedly accessed sensitive security data, including access codes and internal maps, and issued a ransom demand to museum director Simone Verde's personal phone. However, the Uffizi stated that its security systems are closed-circuit and not accessible from the outside, asserting that no passwords were stolen. The attack also impacted the Palazzo Pitti and Boboli Gardens, leading to heightened security measures. The museum is currently cooperating with prosecutors and the National Cybersecurity Agency to investigate the incident. The Uffizi emphasized that the situation is not comparable to the Louvre's recent security failures, as upgrades to their surveillance systems were already in progress.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Boboli Gardens in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…