Italy’s famed Uffizi admits cyber-attack but denies security breach

Italy’s Uffizi Galleries Confirms Cyber-Attack but Reaffirms Security

The renowned Uffizi Galleries in Florence has acknowledged a cyber-attack, though it insists the security infrastructure safeguarding its iconic art collection remained intact. Officials emphasized that no damage or theft occurred during the incident, which reportedly allowed hackers to access internal IT systems and sensitive data without compromising the museum’s physical defenses.

Italian media outlet Corriere della Sera claimed the attackers infiltrated the museum’s digital networks, allegedly retrieving access codes, internal blueprints, and the placement of surveillance equipment. A ransom was subsequently demanded via the personal phone of museum director Simone Verde, with threats to publish the information on the dark web. However, the Uffizi contested these claims, stating that its security systems are fully internal and not accessible from external networks.

“There is no evidence whatsoever that the hackers possessed any maps of the security systems,” the museum stated. “Anyone entering the gallery could see where cameras were located, as is standard for public spaces, so their positions were not a surprise.”

The cyber-attack, which took place between late January and early February, impacted not only the Uffizi but also its separate locations at Palazzo Pitti and the Boboli Gardens. This follows the recent daylight theft at the Louvre in Paris, where masked intruders exploited outdated CCTV systems to steal priceless artifacts. The Uffizi said it had already been upgrading its security measures, including replacing analog cameras with digital ones after police recommendations in 2024.

While some doors at Palazzo Pitti were sealed as part of ongoing renovations, the museum attributed this to fire-safety improvements. It noted that decades of operation lacked proper certification and only submitted a safety notice to the fire brigade two days prior. Additional closures were described as efforts to control the flow of spaces in the 15th-century building, adapting to its evolving roles and global security landscape.

The Uffizi also addressed claims of a complete digital archive theft, insisting that its photographic server remained unaffected. A backup system was in place, and though the server was temporarily down, data loss was avoided. The museum, which generates approximately €60 million annually and ranks as Italy’s second-most visited institution, continues to welcome visitors without disruption to ticketing or public areas.