MisuseGovernmentGovernmentPrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

County of Los Angeles Department of Public Social Services

bd_9f469a055e462c85 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 28, 2025

Filed

Jun 12, 2026

To disclose

13 months

Affected

Not disclosed

Confidence

65%

Full breach record for County of Los Angeles Department of Public Social Services →2 incidents on file

Los Angeles County Department of Public Social Services reported an insider incident where an employee accessed personal information (names, SSNs, DOBs, case numbers, benefit info) without legitimate business reason between Jan 2024 and May 2025. Discovered May 28, 2025. Corrective actions referred to HR.

J jump to incidentP pin to compareR raw source

California clockDiscovered May 28, 2025 → Notified May 19, 2026356d ✗ CA 60-day late13 months discovery → filing

Incident timeline

undetected · 513 days

discovery → filing · 13 months / 380 days

Jan 1, 2024

Begins

May 28, 2025

Discovered

Jun 12, 2026

Filed

vs. sector median

+43 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: County of Los Angeles Department of Public Social Services
norm: county of los angeles department of public social

Name: County of Los Angeles Department of Public Social Services
norm: county of los angeles department of public social
Industry: Governmentllm

Discovered: May 28, 2025
Breach occurred: Jan 1, 2024 – May 31, 2025
Undetected for: 513 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 19, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Initial access: insider_action

During the incident: Referred the matter to the County Department's human resources for assessment of corrective and disciplinary actions
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(380 days from discovery to filing)
Compliance flags: CA 60-day late · 356dCA AG copy >15d · 24d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: May 28, 2025
→ Notified: May 19, 2026
356d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
California
Consumers notified: May 19, 2026
→ AG copy submitted: Jun 12, 2026
24d 15 calendar days CA AG copy >15d

Statute	Window	Elapsed	Threshold	Status
California	Discovered: May 28, 2025 → Notified: May 19, 2026	356d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late
California	Consumers notified: May 19, 2026 → AG copy submitted: Jun 12, 2026	24d	15 calendar days	CA AG copy >15d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-624859
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 12, 2026
Raw hash: b72f8d5a566420925ed1372e58ba7c2865714729265c449c5ec2462440044a9f

Reporting entityCounty of Los Angeles Department of Public Social Services

Victim entityCounty of Los Angeles Department of Public Social Services

Incidentdiscovered May 28, 2025

Stated responseReferred the matter to the County Department's human resources for assessment of corrective and disciplinary actions

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov