LACMA Says 2025 Breach May Have Exposed Social Security and Medical Data
Summary
LACMA says its network was compromised in July 2025 and personal, financial, and medical information may have been accessed. The museum notified law enforcement and affected individuals.
Key points
- LACMA detected suspicious activity on July 11, 2025; the museum said it had begun four days earlier.
- An investigation confirmed the museum's network was compromised about a month after detection.
- Information that may have been accessed includes names, birth dates, Social Security numbers, and government-issued ID numbers.
- Potentially affected information also includes partial financial and payment card details, health insurance information, and medical records.
- LACMA notified law enforcement and sent breach notices with access to a one-year identity theft and fraud protection service.
- The museum recommended that affected individuals monitor accounts, consider a credit freeze or fraud alert, and report suspected identity theft.
Article Details
- Victim Organization
- Los Angeles County Museum of Art (LACMA)
- Incident Type
- Data breach involving confirmed network compromise; the attack method is not disclosed.
- Incident Date
- 2025-07-07
- Data Types Exposed
- Names
- Dates of birth
- Social Security numbers
- Driver’s license or government-issued identification numbers
- Partial financial account numbers
- Partial payment card information
- Health insurance information
- Medical information, including provider names, treatment, diagnoses, treatment dates, or treatment locations
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- LACMA confirmed its network was compromised. No operational disruption is described.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed