Notice of Data Security Incident
August 24, 2026 – LACMA (the Los Angeles County Museum of Art) is providing notice of an incident involving unauthorized access to some customer and employee information. On July 11, 2025, we detected a cybersecurity incident involving unauthorized activity in portions of our computer systems. We immediately began investigating and responding to that incident.
What Happened?
On July 11, 2025, we detected suspicious activity on our computer systems. We immediately began working with third-party cybersecurity experts to investigate and remediate that activity. In August 2025, the investigation found that an unauthorized third party gained access to a portion of our computer network from July 7 to 11, 2025.
After identifying the files potentially affected by the incident, LACMA engaged a data-review firm to analyze the contents of the affected files. We received the initial data-review results in late February 2026, and have been working since then to ensure we have accurate contact information for impacted individuals.
What Information Was Involved?
The investigation identified that the following types of personal information may have been accessed: full name, date of birth, Social Security number, driver’s license or government-issued identification number, limited financial account numbers, limited payment card information, health-insurance information, and limited medical information such as provider name, medical treatment, diagnosis, treatment dates, or treatment locations. The categories of data varied across individuals.
What We Are Doing
We worked with third-party experts to address this event, perform an investigation into the unauthorized activity, and further secure our systems. We also notified law enforcement. We are providing notification to affected individuals under applicable law and posting notice to our website.
What You Can Do
For individuals who receive a letter from us about the incident, we encourage them to read the information carefully. We encourage individuals to (1) remain vigilant for unauthorized financial activity by reviewing their account statements and free credit reports, (2) consider placing a fraud alert or security freeze on their credit file (which individuals can do for free), and (3) report any suspicious activity or suspected incidents of identity theft to their financial institutions and law enforcement. Additional steps can also be found at www.IdentityTheft.gov/.
For More Information.
We have established a toll-free call center to support impacted individuals and to answer their questions about the incident and this notice. The call center can be reached at (844) 953-2547.