Last year the Los Angeles County Museum of Art (LACMA) discovered a security incident that turned out to be worse than a frustrating gallery audio guide. After spotting suspicious activity on July 11, 2025 — which had actually started four days earlier — investigators later confirmed the network had been breached. Initial answers were fuzzy, but more concrete findings started to show up by late February 2026.

What happened (timeline, in plain English)

Short version: someone wandered into the digital back room. The museum detected the unusual activity on July 11, 2025. A deeper look revealed the intrusion began about July 7. A month later investigators confirmed the network had been compromised, and it took until the following year for a fuller picture of what may have been accessed to emerge.

What may have been exposed — and what you should do

The museum says the attacker may have accessed a variety of personal records. If you’re an employee, donor, or someone who had interactions with LACMA, here’s the list of data types that might have been involved:

  • Full name
  • Date of birth
  • Social Security number
  • Driver’s license or other government ID number
  • Partial bank account numbers
  • Partial payment card information
  • Health insurance details
  • Medical information (provider names, diagnoses, treatments, dates, locations)

If you got a notification from the museum, here are sensible next steps (no drama, but do them):

  • Keep a close eye on your bank and card statements for anything weird.
  • Consider placing a security freeze or a fraud alert with the credit bureaus.
  • Report suspected identity theft to your bank and local law enforcement promptly.

LACMA mailed personalized breach notices to impacted people and included an offer to enroll in a one-year identity theft and fraud protection service through Financial Shield, with an enrollment deadline of November 22. They also set up a dedicated phone line to answer questions for those affected.

For context, LACMA is one of the biggest art museums in the western U.S., with roughly 155,000 works spanning about 6,000 years and more than a million visitors in a typical year — so a security incident there can potentially reach a lot of people.

If you’re worried and haven’t received a letter but suspect you might be affected, reach out to the museum’s support line (check the official LACMA site for contact details) and consider the protective steps above. The worst time to act is after something bad shows up on your credit or bank statement.