County of Los Angeles Department of Public Health

Los Angeles County Department of Health Services experienced a phishing attack between February 19-20, 2024, where hackers obtained login credentials for 23 employee email accounts via malicious links. Compromised data included names, dates of birth, addresses, phone numbers, email addresses, medical record numbers, and health information (diagnoses, treatments, medications). SSNs and financial information were not involved. DHS disabled accounts, reset devices, blocked phishing sites, and notified law enforcement and regulators (CDPH, HHS OCR).