According to the notification, the breach involved unauthorized access to systems holding a range of personal details. For affected individuals, the exposed data may include:

• Full names
• Social Security numbers
• Medical information (for certain individuals)
• Other personal identifiers

LACMA has stated that it is cooperating with law enforcement and has engaged cybersecurity experts to contain the incident. The museum is offering credit monitoring and identity protection services to those impacted.

The exact attack vector and timeline of the intrusion have not been fully disclosed, but the museum emphasized that steps have been taken to strengthen its network security. As is standard in such disclosures, LACMA recommends that affected individuals remain vigilant against phishing attempts and monitor their financial accounts and credit reports for suspicious activity.

Source: BleepingComputer

Given how common these delays are between a breach occurring and its public disclosure, is your organization treating notification gaps as a formal part of its incident response planning?