Cleveland Museum of Natural History

The Cleveland Museum of Natural History is a cultural and scientific institution located in the United States, dedicated to the exploration and preservation of natural history. As a museum, its core mission involves maintaining and displaying collections related to the natural world, including specimens and artifacts from fields such as paleontology, archaeology, anthropology, and geology. It serves a broad public audience through educational exhibitions, public programs, and research initiatives that aim to foster an understanding of natural sciences and human history. The museum's work supports academic study and community engagement, providing a resource for learners of all ages and contributing to the scientific record through its curated collections. Its operational scope is primarily regional, focusing on serving the Cleveland community and visitors to Ohio, while its collections and research may have national or international relevance within the scholarly community.

In May 2020, the museum was indirectly involved in a significant cybersecurity incident when a third-party service provider it relied upon was targeted by a ransomware attack. The attacker successfully exfiltrated data from the contractor's systems before the intrusion was disrupted, leading the contractor to pay a ransom based on assurances that the stolen information would be destroyed. The museum confirmed that no sensitive personal data, including Social Security numbers or financial details, was compromised in the incident. Following the event, the institution proactively communicated with stakeholders about the breach and advised them to remain vigilant for any suspicious activity. This response highlighted the museum's commitment to transparency and stakeholder protection in the face of a supply-chain security compromise, though the incident underscored the vulnerability of even non-technical cultural institutions to cyber threats through their vendor relationships. The museum's handling of the situation, including its clear public statements, serves as a notable example of incident communication within the museum sector.