Where does the Phoenix Art Museum case file come from?

Every entry is taken from the breach report Phoenix Art Museum lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Phoenix Art Museum Data Breach

This file collects the dated facts on record for the Phoenix Art Museum incident. The state report is dated April 15, 2026. The incident itself is dated December 3, 2025.

Timeline

133 days separate the incident date from the date it was reported.

December 3, 2025Incident dateWhen the filing says the breach took place.
April 15, 2026Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: April 15, 2026
Incident date: December 3, 2025
Receiving office: Indiana Attorney General

Case notes

The Phoenix Art Museum has disclosed a data security incident, according to a public filing. The museum reported that the incident occurred on December 3, 2025, and subsequently filed its official report on April 15, 2026. The nature of the breach itself remains unspecified in the public record.

The specific categories of personal information involved in this incident were not detailed in the available filing. The museum has indicated that an investigation into the scope and impact of the incident is currently underway. This process aims to fully understand what occurred and identify all affected parties.

Individuals who have engaged with the Phoenix Art Museum, particularly those who may have provided personal information, should remain vigilant. Review any communications from the museum for further specific details as they become available. Keep a close watch on your accounts for any unusual activity.

As a general precaution, it is advisable to monitor your personal accounts and statements for any unauthorized access or suspicious transactions. Consider setting up fraud alerts with credit bureaus as a proactive measure. Be cautious of unsolicited communications that claim to be from the museum and request personal details, as these could be phishing attempts.

While the full details are still being investigated by the Phoenix Art Museum, taking general protective steps is a prudent course of action. Stay informed about any updates the museum may provide regarding this data security event.

Questions about this case file

Where does the Phoenix Art Museum case file come from?: Every entry is taken from the breach report Phoenix Art Museum lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the Phoenix Art Museum breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files