Cyber Incident Victim: Whisky Auctioneer
Date:
Apr 2020
Location:
United Kingdom
Summary
A cyber-attack disrupted an online auction platform specializing in rare whiskies, forcing its website offline during the final stages of a high-value auction. The targeted attack caused technical failures, leading to indefinite postponement of the sale, which included nearly 2,000 lots with one bottle anticipated to sell for over a million dollars. The platform acknowledged the incident as technologically sophisticated and malicious, initiating an investigation while assuring customers of ongoing efforts to mitigate impacts and enhance security safeguards. Customer communications were issued regarding potential data exposure, though specific attack details remained undisclosed. The incident halted a record-breaking auction event and underscored operational vulnerabilities.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Whisky Auctioneer cyber incident disrupted the online auction of "The Perfect Collection: Part Two," a high-value sale of rare whiskies from the late American collector Richard Gooding. The auction, hosted by the Perth-based specialist platform, commenced on April 10, 2020, with 1,958 lots scheduled to conclude on April 20. At approximately 22:30 BST on April 21, the website experienced a targeted cyber-attack characterized as technologically sophisticated, sustained, and malicious. This forced Whisky Auctioneer to take its website and databases offline. Initial technical issues on April 20 had prompted a 48-hour postponement, attributed at the time to abnormal excessive website loads. The subsequent investigation confirmed a deliberate attack, leading to indefinite suspension of the auction phase, which included a 1926 Macallan bottle projected to sell for $1.25 million. The first phase of Gooding’s collection auction had concluded successfully earlier in 2020, generating nearly $4 million from over 1,900 bottles.
Whisky Auctioneer’s response included immediate website deactivation, customer notifications, and an active investigation to determine the attack’s scope and origin. The company publicly acknowledged the incident via a service announcement, emphasizing its commitment to data security and ongoing implementation of technological safeguards. No specifics regarding attack vectors, data compromise, or threat actors were disclosed. The disruption indefinitely delayed a potentially record-breaking auction, impacting buyers and sellers engaged in the high-value whisky market. Richard Gooding’s collection, amassed over two decades through private international acquisitions, represented a significant cultural and financial asset. The incident underscored operational vulnerabilities in online auction platforms handling premium assets, though Whisky Auctioneer maintained customer trust through transparent communication and prioritization of system integrity over auction timelines.