If you read this blog, you probably think a lot about crates, climate control, and air-ride trucks. You plan a move around the physical safety of a painting or a sculpture, and that instinct is right. What gets far less attention is the paper trail that travels with every work: provenance files, condition reports, valuations, insurance schedules, and the delivery address of a home that holds a serious collection.

Fine Art Shippers works with private clients, galleries, auction houses, and institutions, and every job generates records that are as sensitive as the artworks themselves. A move or a sale is exactly when that information gets copied, emailed, scanned, and shared with more people than usual. Here are three persistent myths about that exposure, and what to do instead.

Only big companies get breached, not collectors

Many collectors assume criminals chase banks and retailers, not someone with a quiet townhouse and a few good canvases. It is an understandable belief because headlines focus on giant incidents. Still, if you have ever wondered, "Am I on the dark web?" the honest answer is that ordinary people turn up there all the time, usually through a breach at a company they once did business with.

The scale is hard to wave away. According to Idtheftcenter, US organizations recorded 1,803 data compromises in the first half of 2026, and the roughly 471 million victim notices issued in that period exceeded the total for all of 2025. A collector's email, phone number, and home address sit in many of those databases, and a list of valuable-art owners is worth more to a thief than a random one.

Notice the last two rows. Most companies no longer say how they were hit, and device access is climbing fast. That means the laptop or phone where you keep scanned condition reports matters as much as any vendor's server.

A shipper only handles crates, not your data

It is natural to focus on the object itself when considering shipping risks. However, art transportation also involves handling sensitive information, such as artwork valuations, pickup and delivery addresses, and installation schedules. Quotes, bills of lading, and storage inventories may contain these details and are often shared electronically as part of routine logistics coordination.

This is not a reason to distrust art shippers, but an opportunity to understand how they protect client information alongside the artworks they handle. Clients can ask who has access to valuations and personal details and whether information is limited to what drivers or subcontractors need to complete their tasks. A professional firm should be able to explain its confidentiality practices clearly, just as it explains its packing procedures, storage facilities, and security measures.

Also be wary of sharing more than the job needs. A shipper rarely requires your full purchase history to move one piece. Send the minimum: dimensions, condition notes, images, pickup and delivery details, and value for insurance purposes. Keep the complete provenance file in your own secured records.

Dark web exposure would be obvious, and you would be told

This may be the most dangerous myth. People expect a warning, a call, or a strange charge, but exposed data often sits quietly for months. The same recent report shows that fewer than a quarter of breach notices even explain how the attack happened, so a letter, if one arrives at all, tells you little. Stolen details are frequently held, resold, and combined with other leaks before anyone uses them.

For a collector, the practical risks are targeted phishing that mimics a shipper or gallery, fake invoices that redirect a payment, and social engineering aimed at your delivery window. Treat any change to payment instructions or delivery timing as suspect until you confirm it by phone with a number you already had. Use unique passwords, turn on multifactor authentication for email and cloud storage, and run a periodic check of your addresses in a breach-monitoring tool.

What to ask for in a crating, transport, and records plan

Before any move, build a small file and agree on how it will be handled. A solid plan covers both the object and the information around it. Ask for these items in writing:

First, a condition report with photographs for every work and a shipping document signed at pick-up and again at delivery, so any change is documented. Second, a copy of your provenance and valuation records held in your own encrypted storage, with only redacted versions going to the shipper. Finally, agree on one verified contact channel for any change of address, payment, or schedule.

None of this is complicated, and most of it takes an afternoon. A collection deserves protection on both fronts, the crate on the truck and the data behind it. When you request a quote, treat these questions as part of the conversation rather than an afterthought, and you will move with far fewer unpleasant surprises.