LACMA confirms 2025 breach exposed Social Security numbers and medical records
The Los Angeles County Museum of Art disclosed that hackers accessed its network for four days before detection on July 11, 2025, compromising sensitive data belonging to customers and employees. Exposed information includes Social Security numbers, driver's license numbers, partial financial and payment card details, and health-related records such as diagnoses and treatment history. The museum only completed its investigation and began notifying affected individuals in late February 2026, more than a year after the intrusion was found.
GoKawiil's interpretation of the reporting above, not reported fact.
The long gap between detection and notification left victims exposed to identity theft and medical fraud risks for over a year without knowing their data had been stolen. As a major cultural institution handling both visitor and staff personal data, LACMA's breach highlights how organizations outside traditional tech or finance sectors remain attractive targets for attackers seeking Social Security numbers and health records.
- A breach detected in July 2025 wasn't fully investigated and disclosed until February 2026.
- Stolen data includes Social Security numbers, ID numbers, partial financial details, and medical records.
- LACMA is offering a free year of identity theft protection through Financial Shield, with enrollment ending November 22.
Amazon Basics 12-Sheet Micro-Cut Shredder — Breach notices like LACMA's are a reminder that Social Security numbers and insurance statements shouldn't sit in a recycling bin. This micro-cut shredder turns sensitive mail, old statements and expired cards into confetti-sized bits, closing the low-tech door to identity theft while you freeze your credit online.
See Amazon Basics 12-Sheet Micro-Cut Shredder on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-25
Published there as: “LACMA data breach last year exposed social security and medical data”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.