Uffizi: official response to the cyber incident — no passwords stolen

Uffizi: official response to the cyber incident

The museum's management issued a clear statement about the cybersecurity incident detected between late January and early February. While confirming an unauthorized access to systems, the Uffizi states there has been no damage to collections and no theft of passwords or sensitive information.

• No damage to collections — The administration reports no artworks were harmed or removed; conservation and collection care continue as usual.
• Surveillance and cameras — Camera systems were undergoing replacement from analog to digital; the upgrade started in 2024 following police recommendations and was later accelerated. This work improved monitoring but was not evidence of leaked security maps.
• Movement of the Medici Treasure — Relocations of certain items were part of scheduled restoration and display works. Contacts with custodial institutions began in autumn for logistical and physical protection reasons.
• Structural and fire-safety measures — Some door closures and layout changes respond to fire-safety requirements and to reducing excessive permeability in historic buildings, not solely to the cyber incident.
• Backups and photographic archives — The museum confirms that photographic servers and cataloguing backups were completed and remain under the museum’s control; there is no evidence of theft of these archives or compromise of staff phones.
• Ongoing actions — Security audits, cooperation with law enforcement and acceleration of protection projects are in progress to strengthen both digital and physical defenses.

Visitor information: exhibitions and public access remain guaranteed; logistical adjustments related to renovation are being managed to minimize disruption. The museum urges reliance on official statements and notes that many security measures were already planned before the incident.