Phoenix Art Museum Reports Data Security Incident to Indiana AG

The Phoenix Art Museum has confirmed a data security incident, filing an official report with the Indiana Attorney General on April 15, 2026. This report indicates that unauthorized parties may have gained access to the museum's internal systems.

The incident, which occurred on December 3, 2025, involved potential unauthorized access to personal information maintained by the museum. While the specific types of data exposed were not detailed in the public filing, the museum collects and stores information from its members, donors, and staff as part of its regular operations.

Individuals who received a data breach notification letter directly from the Phoenix Art Museum are advised to carefully review that communication. Such letters typically provide specific details regarding whose information may have been affected and any services offered in response.

As a general precaution, it is recommended to remain vigilant for any unusual activity across your online accounts and to regularly review financial statements. Be cautious of unsolicited communications, especially those requesting personal details, as these could be phishing attempts.

The investigation into the scope and impact of this security incident is ongoing. The details provided here are based on the museum's public filing with regulatory bodies.