The Uffizi Galleries in Florence, Italy, was hit by a cyberattack on 1 February 2026, which left staff with email accounts suspended, internal servers unreachable, and the administrative backbone of one of the world's most celebrated museums effectively dark. The malware had entered through a vulnerability linked to software managing low-resolution images on the museum’s website. The attacker then moved laterally through the network connecting the Uffitzi, Palazzo Pitti, and Boboli Gardens, touching the photographic archive server and sending a ransom demand directly to director Simone Verde. The incident revealed a sector that has been ignoring physical security and ignoring the digital kind. The only operational disruption was the time required to restore backups.