CyberNew CyberNew
Data Breaches & Leaks BleepingComputer 1 month ago

LACMA data breach last year exposed social security and medical data

CN
CyberNew Threat Research Desk
• Original Reporting: BleepingComputer
CyberNew Threat Intel Assessment
Assessed Severity: HIGH
Impacted Surface
Enterprise Data & Identity Stores
Intelligence Sector
Data Breaches & Leaks

Analyst Takeaway

"The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. The museum says that on July 11, 2025, it detected suspicious activity on its systems that had started four days earlier. A month later, the investigation confirmed that the network was compromised. At the time, the type of exposed data could not be determined, and the..."

Recommended Defense & Mitigation

  • Access Review: Audit administrative roles, enforce phishing-resistant MFA, and review privilege escalations.
  • Credential Rotation: Rotate high-privilege service credentials and tokens associated with impacted services.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

LACMA data breach last year exposed social security and medical data

The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information.

The museum says that on July 11, 2025, it detected suspicious activity on its systems that had started four days earlier. A month later, the investigation confirmed that the network was compromised.

At the time, the type of exposed data could not be determined, and the first results of the investigation became available in late February 2026.

image

More than a year after the discovery of the data breach incident, the museum identified that the following information may have been accessed by the attacker:

  • Full name
  • Date of birth
  • Social Security number
  • Driver’s license or government-issued identification number
  • Partial financial account numbers
  • Partial payment card information
  • Health insurance information
  • Medical information such as provider name, medical treatment, diagnosis, treatment dates, or treatment locations

LACMA says it has notified law enforcement authorities about the incident and sent personalized data breach notifications to impacted individuals.

Get the report

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from BleepingComputer.

Primary Advisory →