L.A. County Department of Public Health reports phishing attack, data breach
Learn More
The Los Angeles County Department of Public Health is reporting a data breach affecting over 200,000 individuals.
Following the breach, the Department of Public Health has taken several steps to mitigate the impact, including disabling compromised email accounts, resetting affected devices, blocking phishing-related websites, and quarantining suspicious emails.
This incident was caused by a phishing attack that successfully compromised the login credentials of 53 public health employees. The breach, which occurred between February 19 and 20, exposed sensitive personal information, including:
- First and last names
- Dates of birth
- Diagnoses
- Prescription information
- Medical record numbers
- Health insurance information
- Social Security numbers
- Financial information
The agency has clarified that not all affected individuals had every piece of listed information compromised.
Affected individuals will receive notification letters. The county is offering free identity monitoring services through Kroll, a financial and risk advisory firm.
It's unclear whether this breach is related to the breach of LA County Department of Mental Health.
