The Termite ransomware group claims to have breached the Birmingham Museum of Art (BMA), a prominent cultural institution located in Alabama. Featuring a vast collection of over 27,000 artworks, the BMA serves a diverse audience—including families, students, and art enthusiasts—by offering free admission, educational resources, and various exhibitions throughout the year.
According to the actor, a massive cache of internal files and directories has been exfiltrated from the museum’s network. The allegedly compromised data includes:
-
Financial documents, including operating bank statements and payroll registers
-
Extensive donor lists, giving statements, and pledge agreements
-
Credit card processing and monthly settlement reports
-
Employee information, including staff directories and city/non-city employee lists
-
Board of Trustees rosters and contact information
-
Corporate partnership contracts, invoices, and sponsorship agreements
-
Grant applications, foundation records, and audited financial statements
-
IT database backups, system logs, and security infrastructure files
