LACMA data breach last year exposed social security and medical data

The Los Angeles County Museum of Art (LACMA) disclosed a network compromise detected July 11, 2025 that may have exposed customer and employee personally identifiable information — including full names, dates of birth, Social Security numbers, driver’s license/ID numbers, partial financial/payment data, and health/medical records. LACMA notified law enforcement and sent breach notifications with an offer of one-year identity protection services and a support phone line, but has not disclosed the number of affected individuals or technical details of the attack.