LACMA reports data breach, sensitive client information compromised

The Los Angeles County Museum of Art recently announced a cyber security breach it suffered last year that resulted in the exposure of sensitive personal data belonging to its clients.

 

The Los Angeles County Museum of Art (LACMA) is the largest art museum in the western United States and a leading cultural destination located along Museum Row on Miracle Mile. Its extensive collection of more than 150,000 artworks represents approximately 6,000 years of human artistic expression, with notable collections featuring Asian, Latin American, Islamic, and modern art.

 

In a data security notice published on its website, LACMA said that on July11,2025, it identified unauthorised access to its internal network. The museum authorities immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected network and notified relevant law enforcement authorities about the incident.

 

“In August 2025, the investigation found that an unauthorised third party gained access to a portion of our computer network from July7 to 11,2025,” LACMA said.

 

The compromised data included names, dates of birth, Social Security numbers, driver’s license or government-issued identification numbers, limited financial account numbers, limited payment card information, health-insurance information, and limited medical information such as provider names, medical treatment, diagnosis, treatment dates, or treatment locations.

 

Museum authorities are currently assessing the situation and have not provided further details regarding the total number of people impacted.

 

LACMA has urged affected individuals to remain vigilant by regularly reviewing their credit reports, account and benefits statements, and to report any suspicious activity to law enforcement agencies, including local police and the state attorney general.

 

At the time of publishing, no known hacker group claimed responsibility for the cyber attack on LACMA. The Museum authorities also did not share details on who was behind the attack, how much data was compromised, or whether it has received a ransom demand.