GKRootWire
Cloud & Sysadmin Microsoft Confirms Preview Update Wipes Out Desktop SettingsAI Nvidia to Acquire Hugging Face for $12.9 BillionDev Tools A Deep Dive Into Intrusive Linked ListsGadgets DJI's Romo 2 Robovac Adds Local-Only Mode After Privacy ScareAI Nvidia Reportedly Moves to Acquire Hugging FaceAI Anthropic Launches Claude Tools for AI Shopping AgentsCloud & Sysadmin Microsoft Confirms Preview Update Wipes Out Desktop SettingsAI Nvidia to Acquire Hugging Face for $12.9 BillionDev Tools A Deep Dive Into Intrusive Linked ListsGadgets DJI's Romo 2 Robovac Adds Local-Only Mode After Privacy ScareAI Nvidia Reportedly Moves to Acquire Hugging FaceAI Anthropic Launches Claude Tools for AI Shopping Agents
Security

LACMA Discloses Data Breach Exposing SSNs and Medical Records

The Los Angeles County Museum of Art says a 2023 security incident compromised sensitive personal data belonging to staff and visitors.

The Los Angeles County Museum of Art has revealed that a breach discovered last year resulted in the exposure of sensitive personal information belonging to both employees and members of the public. According to the museum's notification, the compromised data includes Social Security numbers and medical information, putting affected individuals at heightened risk of identity theft and fraud.

Details on how the attackers gained access and how many people were affected remain limited. As is typical with these delayed disclosures, LACMA is offering credit monitoring services to those impacted and has notified relevant authorities.

The museum joins a growing list of cultural and nonprofit institutions targeted by cybercriminals who increasingly see under-resourced organizations as easy marks for data theft.

Why it matters: Museums, nonprofits, and other organizations outside the traditional tech and finance sectors often hold troves of sensitive employee and donor data while investing far less in security infrastructure. This breach is a reminder that any organization handling SSNs or health data is a viable ransomware or data-theft target, regardless of its core mission.

Sources: BleepingComputer