What Is This About?

If you recently received a letter or an email from Phoenix Art Museum informing you that your sensitive personal information was compromised in a data breach, we would like to speak with you about your rights and potential legal remedies. Phoenix Art Museum recently disclosed that it was the victim of a data breach that exposed individuals’ sensitive personal information.

What Happened?

On December 3, 2025, Phoenix Art Museum experienced unauthorized access to certain systems within its network. Phoenix Art Museum discovered the unauthorized access on December 8, 2025. After reviewing the files that were accessed, the museum determined on March 20, 2026, that personal information was contained within the files. The breach was reported to the Maine and Massachusetts Attorneys General on April 15, 2026, and affected individuals were notified by written letter. In addition, on February 12, 2026, the RHYSIDA ransomware group claimed responsibility for the attack, stating it had obtained the museum’s data and intended to publish it on the dark web within days.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal information may have been compromised:

• "Names";
• "Social Security numbers".

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you received a notice from Phoenix Art Museum, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.