County of Los Angeles Department of Public Health

Los Angeles County Dept of Public Health experienced a phishing attack between Feb 19-20, 2024, where an external actor gained credentials for 53 employees via a malicious link. Compromised data may include names, DOB, SSN, diagnoses, prescriptions, medical record numbers, and insurance info. DPH disabled accounts, reset devices, and offered one year of identity monitoring via Kroll. Law enforcement was notified.

County of Los Angeles Departments of Health Services and Public Health reported to HHS on 2024-04-25 a Hacking/IT Incident (email phishing scheme) affecting 252,856 individuals. Multiple employees were targeted via phishing, exposing PHI including names, addresses, dates of birth, driver's license and Social Security numbers, financial information, diagnoses, conditions, lab results, medications, and other treatment information. Breached information located on Email. The CE notified affected individuals, media, and HHS, and offered credit monitoring. Staff were retrained on email security and additional technical safeguards were implemented.

The County of Los Angeles Department of Public Health disclosed that between July 1, 2020, and July 29, 2022, 1,942 Mobile Food Facility Official Inspection Reports containing names and driver's license numbers were inadvertently posted on its Environmental Health Division website. The reports were removed, and staff received additional training on privacy policies.