AccidentalGovernmentHealthcareGovernmentMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDMediumResolved

County of Los Angeles Department of Mental Health

bd_b887397b28b84674 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 24, 2017

Filed

Nov 13, 2017

To disclose

20 days

Affected

Not disclosed

Confidence

65%

Full breach record for County of Los Angeles Department of Mental Health →7 incidents on file

On October 24, 2017, an employee of the Los Angeles County Department of Mental Health inadvertently emailed a spreadsheet containing job candidates' names, email addresses, and Social Security Numbers to other candidates. The department notified affected individuals on November 13, 2017, and offered one year of free credit monitoring. The incident was classified as an accidental misdelivery of personal identifiable information.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 24, 2017 → Notified Nov 13, 201720d ✓ CA 60-day OK20 days discovery → filing

Incident timeline

discovery → filing · 20 days

Oct 24, 2017

Begins

Oct 24, 2017

Discovered

Nov 13, 2017

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: County of Los Angeles Department of Mental Health
norm: county of los angeles department of mental health

Name: County of Los Angeles Department of Mental Health
norm: county of los angeles department of mental health
Industry: GovernmentllmHealthcarellm

Discovered: Oct 24, 2017
Breach occurred: Oct 24, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 13, 2017
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Reporting this incident the State Attorney General’s Office

During the incident: Notified the individuals potentially impacted
Reminded employees about the importance of policies and procedures for properly safeguarding confidential information
Offering credit monitoring services
Reporting this incident the State Attorney General’s Office
Changes made: Reminded employees about the importance of policies and procedures for properly safeguarding confidential information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: CA 60-day OK · 20d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 24, 2017
→ Notified: Nov 13, 2017
20d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 24, 2017 → Notified: Nov 13, 2017	20d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-104241
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2017
Raw hash: 1b9ab77647505494409c8a41f1fb1dea58e7bcd1b7985f868df9f4aa84452c7e

Reporting entityCounty of Los Angeles Department of Mental Health

Victim entityCounty of Los Angeles Department of Mental Health

Incidentdiscovered Oct 24, 2017

Stated responseNotified the individuals potentially impacted

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov