The Phoenix Art Museum experienced an external system breach (hacking) that occurred on December 3, 2025. The museum discovered the breach on March 20, 2026. The Maine Attorney General was notified on April 15, 2026, and consumers were notified starting April 15, 2026.
The breach exposed names and Social Security numbers. No medical or additional financial data beyond SSNs was reported. A total of 1,758 individuals were affected, including 2 residents in Maine and 6 in Massachusetts. The museum offered complimentary one-year credit monitoring and identity theft protection services through Epiq.
Details can emerge later as investigations continue, and notices to affected individuals may be delayed.