County of Los Angeles Department of Mental Health
bd_4bcc01e8c8693b4b · schema v1 · pii pii-v1
Full breach record for County of Los Angeles Department of Mental Health →Los Angeles County Department of Mental Health notified the CA AG of a breach stemming from a cyber-attack on the Department of Children's and Family Services (DCFS) on Oct 17, 2023. Attackers used MFA push notification spamming to access a DCFS employee's Microsoft 365 account, then leveraged email exchanges to compromise a DMH employee's account. Affected data includes names, DOBs, SSNs, addresses, phone numbers, medical record numbers, health insurance info, diagnoses, and treatment info. DMH disabled accounts, reset credentials, engaged forensics, and implemented new security controls.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_99d02371dc2eb513HHS OCRfiled 2023-12-22(1d gap)Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-578351
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2023
- Raw hash
- 2331df63856769988f06cdb451ec2c2ad457e5c82586f4105de82e2ce5e9ac3b
Reporting entity
- Name
- County of Los Angeles Department of Mental Healthnorm: county of los angeles department of mental health
Victim entity
- Name
- County of Los Angeles Department of Mental Healthnorm: county of los angeles department of mental health
Incident
- Discovered
- Oct 17, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Third party
- via Department of Children's and Family Services
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.