A major art museum in Los Angeles has revealed that a data breach last year exposed sensitive information about its visitors and employees, including social security numbers and medical records. The Los Angeles County Museum of Art (LACMA) detected suspicious activity on its systems in July 2025, but it took over a month to confirm the extent of the breach.
The investigation ultimately revealed that attackers had access to a range of sensitive information, including full names, dates of birth, social security numbers, driver’s license or government-issued ID numbers, and partial financial account details. Perhaps most concerning, however, is that medical information was also compromised – this included provider names, treatment diagnoses, treatment dates, and locations.
The fact that LACMA has now disclosed the nature of the breach means that affected individuals can take steps to protect themselves from potential identity theft or fraud. The museum has notified law enforcement authorities about the incident and sent personalized data breach notifications to those whose information was exposed. These letters recommend that recipients monitor their bank accounts for suspicious activity, consider placing a security freeze or fraud alert on their credit file, and report any attempts at identity theft.
It’s worth noting that LACMA is one of the largest art museums in the western United States, attracting over one million visitors each year. The fact that this breach occurred suggests that even institutions with robust security measures in place can still be vulnerable to attack. What’s more, it highlights the importance of staying vigilant and taking proactive steps to protect sensitive information.
The museum is offering a one-year identity theft and fraud protection service through Financial Shield to affected individuals, although there is an enrollment deadline of November 22. A dedicated phone line has also been set up for those who need support or have questions about the breach. While the exact number of impacted individuals remains unclear, it’s clear that this incident will have significant consequences for many people.
In light of this breach, it’s essential for anyone whose information may have been compromised to take immediate action. This includes monitoring financial accounts, checking credit reports, and being on the lookout for suspicious activity. It’s also a good idea to consider enrolling in identity theft protection services like those offered by LACMA, which can provide additional peace of mind. By taking these steps, individuals can help mitigate the risks associated with this breach and protect their sensitive information from potential misuse.
Source: Bleeping Computer — 2026-08-25