Uffizi Galleries Confirm Cyber-Attack but Deny Security Breach
The Uffizi Galleries in Florence, home to some of the world’s most iconic Renaissance art, have confirmed they were the target of a cyber-attack. While the museum acknowledges the infiltration of its IT systems, officials are firmly denying that the security systems protecting its priceless collections were compromised.
Details of the Cyber-Attack
The Uffizi clarified that the hack occurred on February 1, affecting not only the main gallery but similarly its separate sites at the Boboli Gardens and Palazzo Pitti. According to reports from the Italian newspaper Corriere della Sera, hackers managed to infiltrate the museum’s IT systems, allegedly extracting sensitive data including internal maps, alarm locations, and access codes for CCTV cameras.
The attack reportedly involved a gradual infiltration through interconnected phones and computers to build a detailed map of the museum’s operations. This culminated in a ransom demand sent directly to the personal phone of museum director Simone Verde, with attackers threatening to sell the stolen data on the dark web.
The Museum’s Response: “Nothing Stolen”
Despite the reports of data theft, the Uffizi has contested the severity of the breach. The museum stressed that its core security systems remain inaccessible from the outside and insisted that nothing has been damaged or stolen. The gallery maintains that the security protecting masterpieces such as Botticelli’s Primavera and Birth of Venus was never compromised.
The Bank of Italy Clarification
Following the news of the hack, reports surfaced suggesting that the museum had secretly moved jewels to the Bank of Italy as a precautionary measure. The Uffizi has since clarified that while some treasures were indeed moved to the bank vault, this action was tied to renovation perform planned last autumn and had no connection to the cyber-attack.

A Growing Trend in Museum Vulnerabilities
The incident at the Uffizi comes at a time of heightened anxiety for global cultural institutions. Major museums have been forced to reassess their security protocols following a broad-daylight raid on the Louvre in Paris in October, where a masked gang stole priceless treasures by exploiting a weak and aging CCTV system.
In response to these evolving threats, the Uffizi stated that security upgrades already under way have been accelerated both before and after the February cyber-attack to ensure the continued safety of its collections.
Key Takeaways
- Date of Attack: The hack took place on February 1.
- Scope: Affected the Uffizi, Palazzo Pitti, and Boboli Gardens.
- Museum Stance: No artworks were stolen or damaged; security systems were not compromised.
- The Ransom: A demand was sent to Director Simone Verde’s personal phone.
- Bank of Italy: The movement of jewels to the bank was for renovations, not a response to the hack.
Frequently Asked Questions
Were any artworks stolen during the Uffizi hack?
No. The Uffizi has explicitly denied that any artworks were stolen or damaged during the incident.
What information did the hackers allegedly access?
According to Corriere della Sera, the attackers allegedly obtained internal maps, CCTV camera locations, and access codes.
Why were treasures moved to the Bank of Italy?
The museum stated that the move was related to planned renovation work from last autumn and was not a result of the cyber-attack.
Keep reading