Museums face growing cyber threats but security remains an afterthought

According to a report by the UK's public accounts committee, Britain's cultural institutions face growing cyber threats, but security remains underfunded and often an organizational afterthought. The Louvre's eighty-eight million euro heist in 2025 exposed the problem starkly: the museum had spent nearly seven times more on artwork and exhibitions than on all maintenance and security combined—and audits years earlier had warned of obsolete operating systems like Windows 2000 and Windows XP, which stopped receiving security updates in 2010 and 2014 respectively. The British Library experienced a similar breach in 2023, when hackers infiltrated its systems, and the aftermath revealed the institution had "muddled through" with outdated, unconnected systems that left it unable to restore basic services for months. The deeper issue, per the article, is structural: museums separate physical and cyber security under different managers, when today's access controls, surveillance, and climate systems all run on digital networks—meaning a cyber breach can have immediate physical consequences. Without integrating security leadership and investment, Britain's cultural heritage remains vulnerable to the kind of attacks that could cripple both operations and collections.

Listen to this story

Hear this and more stories in a personalized audio briefing.

Open The Chonkerton