Italy’s Famed Uffizi Admits Cyber-Attack but Denies Security Breach
The Uffizi Galleries in Florence, one of the world’s most prestigious art museums, has confirmed it faced a cyber-attack. However, museum officials firmly deny that their security systems protecting invaluable artworks were compromised.
Key Details of the Uffizi Cyber-Attack
– The Uffizi assured the public that no artworks were damaged or stolen despite hackers infiltrating the museum’s IT systems and reportedly accessing sensitive security information.
– Reports from Corriere della Sera indicated hackers extracted access codes, internal maps, and locations of CCTV cameras and alarms before issuing a ransom demand.
– The Uffizi contested this narrative, asserting that its security systems operate in a closed environment, inaccessible from the outside.
– The hackers allegedly maneuvered through interconnected systems, gaining detailed insights into the museum’s operations. A ransom demand was sent to museum director Simone Verde’s personal phone, threatening to sell the stolen data on the dark web.
Timeline and Impact
– The cyber-attack occurred between late January and early February, affecting not only the Uffizi but also the Palazzo Pitti and Boboli Gardens.
– The museum confirmed the actual event took place on February 1.
Since the high-profile heist at the Louvre in October, where thieves exploited the museum’s inadequate security, many institutions, including the Uffizi, have reassessed their safety measures. The Uffizi has accelerated upgrades to its security systems, specifically transitioning from analogue to digital cameras following police recommendations made in 2024.
Uffizi’s Security Assurance
In response to claims about compromised surveillance knowledge, the Uffizi noted:
– There is no evidence that hackers acquired any functional maps of their security systems.
– The placement of security cameras is visible to anyone within the museum, akin to other public spaces.
– The museum firmly stated, No passwords were stolen — none whatsoever, emphasizing that their security systems are fully internal and closed-circuit.
Additionally, it confirmed that employees’ phones were not compromised during the breach.
Management of Historical Artifacts
Parts of the Palazzo Pitti, which houses the famed Medici Treasure, have been reported closed since February 3. Corriere asserted that valuable items were temporarily relocated to a vault of the Bank of Italy for security reasons. While the Uffizi acknowledged the transfer, it categorized it as part of already planned renovation efforts rather than a direct response to the cyber-attack.
– Some doors have been sealed with bricks and mortar, a move the Uffizi partly attributed to overdue fire-safety measures. They had submitted a new safety notice to the fire brigade just days prior.
The decision to seal several entrances was also framed as necessary to manage the evolving functionality and historical integrity of the structures dating back to the 1500s.
Data Integrity and Access
Amid concerns that the hackers had managed to steal the Uffizi’s entire digital photographic archive, the museum insisted that its photographic server remained secure due to an established backup system. Although the server was taken offline for restoration, they confirmed that no data was lost and the backup process has been successfully completed.
Museum Operations and Visitor Experience
Despite these challenges, the Uffizi, Italy’s second-most visited museum after the Vatican, continues to welcome visitors, generating approximately €60 million ($69 million) annually in revenue. Ticketing services and public areas remain largely unaffected, ensuring continued access to its rich collection of masterpieces, including Botticelli’s Birth of Venus and Primavera.
In conclusion, while the Uffizi Galleries dealt with a significant cyber-attack, they reinforced their commitment to visitor safety and the integrity of their artworks. As they enhance their security measures, the museum remains an essential destination for art lovers worldwide.