Phoenix Art Museum Discloses Data Breach Impacting Personal Information The Phoenix Art Museum, the largest art institution in the southwestern U.S., recently reported a data breach involving unauthorized access to its network. The incident was disclosed to the Maine Attorney General on April 15, 2026, with two Maine residents confirmed as affected. The breach was first detected on December 8, 2025, when the museum identified unauthorized access to its systems. A subsequent investigation revealed that the initial intrusion occurred on December 3, 2025. On February 12, 2026, the ransomware group Rhysida claimed responsibility for the attack, threatening to publish stolen data within a week. A review of the accessed files concluded on March 20, 2026, determining that personally identifiable information (PII) including names and Social Security numbers had been exposed. Affected individuals were notified via first-class mail starting April 15, 2026. In response, the museum is offering complimentary one-year credit monitoring and identity protection services through Epiq Privacy Solutions ID, including: - Three-bureau credit monitoring (Equifax, Experian, TransUnion) - Annual credit reports and scores - Social Security number and dark web monitoring - Identity restoration services - Up to $1 million in identity theft insurance (with a $0 deductible) - Unauthorized electronic funds transfer reimbursement (up to $1 million) Affected individuals can enroll using an activation code provided in their notification letter. For assistance, a dedicated response line (844-558-4691) is available, along with direct support from Epiq (866-675-2006). The museum can also be reached at 602-257-1880.