All Breaches
April 1, 2018 Verified Sensitive Record Art marketplace

Artsy 2018 Data Breach

The 2018 Artsy data breach is a credential and contact-data incident affecting an online art marketplace. The external source reports 1,079,970 unique accounts and local search contains 1,079,226 records, a difference of 744.

1.1 Million
Reported Records
4
Data Types
Critical
Severity
Oct 10, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

4
  • Email addresses
  • IP addresses
  • Names
  • Hashed passwords

About This Breach

The four classes are emails, IPs, names, and salted SHA-512 password hashes. A salt is not secret and its disclosure does not by itself weaken a properly salted hash. Risk arises when a weak or reused password is recovered and tried against other services.

Payments, bank data, physical addresses, phones, government IDs, and purchase history are not classes. A record does not establish identity, an Artsy account or artist, buyer, seller, or gallery relationship, art preference or value, IP or location, password ownership, field co-occurrence, or misuse.

If the old password genuinely belonged to the person and was reused elsewhere, it should be replaced. Artwork, offer, sale, or account-security requests should be verified through an independent official channel.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information