[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4VDJYzpGOjH_ItRjf-hHMyFOcf8S06peiY-6-ChWcWM":3},{"article":4,"iocs":38,"watch_terms":39,"solutions":40,"lesson":127},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"6f936e72-f59c-4ba8-aa57-bf4a4edebe3d","LACMA data breach last year exposed social security and medical data","lacma-data-breach-last-year-exposed-social-security-and-medical-data-2e7f77","The Los Angeles County Museum of Art (LACMA) has announced that a breach last year exposed customer and employee information. [...]","The Los Angeles County Museum of Art (LACMA) has disclosed a data breach that occurred last year, exposing sensitive customer and employee information. The breach, detected in July 2025, compromised network systems and potentially accessed full names, social security numbers, driver's license details, partial financial and payment card information, and extensive medical data. LACMA is notifying affected individuals and offering identity theft protection services.","LACMA data breach exposed social security, medical, and financial information.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Flacma-data-breach-last-year-exposed-social-security-and-medical-data\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F25\u002Flacma.jpg","2026-08-25T21:58:14+00:00","2026-08-25T22:00:06.81789+00:00",7,[17],{"name":18,"type":19},"Financial Shield","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":20,"icon":22,"name":23,"slug":24},null,"Breaches","breaches",[26,31,33],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":32},{"id":20,"icon":22,"name":23,"slug":24},{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",[],[18],{"controls":41,"vendors":126},[42,71,97],{"slug":43,"name":44,"problem":45,"products":46},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[47,55,63],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":72,"name":73,"problem":74,"products":75},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[76,84,89],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":85,"product_name":86,"url":87,"description":88},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":98,"name":99,"problem":100,"products":101},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[102,110,118],{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[],{"slug":128,"title":129,"body":130,"framework_refs":131,"framework_notes":144},"lacma-breach-exposes-ssns-and-medical-data-detected-months-after-incident","LACMA Breach Exposes SSNs and Medical Data, Detected Months After Incident","The LACMA breach highlights a dangerous gap between when an attack occurs and when it is detected, allowing adversaries extended access to highly sensitive personal, financial, and medical records. The combination of Social Security numbers, medical data, and financial information creates severe identity theft and fraud risk for affected individuals. A delayed detection timeline suggests insufficient real-time monitoring and alerting on network systems containing regulated data. This incident matters because organizations holding sensitive personal data have both a legal and ethical obligation to detect and contain breaches promptly, minimizing harm to individuals.",[132,133,134,135,136,137,138,139,140,141,142,143],"CIS Control 3 – Data Protection","CIS Control 13 – Network Monitoring and Defense","CIS Control 6 – Access Control Management","NIST SP 800-53 IR-6 – Incident Reporting","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 SI-4 – System Monitoring","HIPAA Security Rule §164.312 – Technical Safeguards","HIPAA Breach Notification Rule §164.400–414","GDPR Article 33 – Notification of a personal data breach to the supervisory authority","GDPR Article 25 – Data Protection by Design and by Default","NIST CSF DE.CM-1 – Network Monitoring","NIST CSF RS.CO-2 – Incident Reporting",{}]