The Los Angeles County Museum of Art says a 2025 cyberattack exposed sensitive customer and employee data, including Social Security numbers and medical information. LACMA detected suspicious activity on July 11, 2025 and later confirmed a network compromise that began on July 7, 2025. By February 2026 it had initial findings, and more than a year after discovery it determined the exposed data may include names, dates of birth, government ID numbers, partial financial and payment card data, health insurance information, and medical treatment details.
Why it matters: People affected face real identity-theft and privacy risks because the exposed data includes both government identifiers and health information. Anyone notified should place fraud alerts or credit freezes, watch financial accounts, and treat follow-up contacts about the breach with caution.
Bill Toulas
2026.08.25
100% relevant
This article appears to be the first clear tracked disclosure for this specific LACMA breach, with concrete details on the timeline and the categories of data exposed.
← Back to all stories