LACMA Data Breach Exposes Sensitive Medical and Financial Data

LACMA, the Los Angeles County Museum of Art, has disclosed a data breach that occurred in July 2025 and exposed sensitive personal and medical information.

An unauthorized third party gained access to a portion of Lacma's computer network from July 7 to 11, 2025.

After detecting suspicious activity on its network, Lacma began working with third-party cybersecurity experts to investigate and address the intrusion. By August 2025, the investigation confirmed that unauthorized access had occurred during that four-day window in July.

Lacma identified the specific files involved in the breach and engaged a separate data-review firm to determine what personal information those files contained. The museum received initial results from that review in late February 2026. In the months that followed, Lacma worked to obtain accurate contact information for affected individuals before sending out notification letters.

The breach exposed a wide range of sensitive data. Personally identifiable information exposed included full names, dates of birth, Social Security numbers, driver's license or government-issued identification numbers, financial account numbers and payment card information.

Protected health information was also compromised, including diagnoses, health-insurance information, and medical information such as provider names, medical treatment or treatment locations and treatment dates.

Lacma began notifying affected individuals on Aug. 24, 2026. The breach was reported to the California Attorney General, and the museum posted a notice about the incident on its website.

LACMA's response to the breach

LACMA is offering a complimentary one-year membership to Financial Shield, an identity-theft and fraud protection service. Affected individuals can enroll by visiting the Financial Shield enrollment page and entering the unique activation code included in their notification letter. Enrollment must be completed by Nov. 22, 2026.

The notification also states that Experian Identity Works is available as an alternative to the online enrollment through Financial Shield. Individuals who prefer this option or who have questions about the enrollment process can contact Experian directly using the phone number and activation code provided in their notification letter.