Sacramento County Department of Child, Family & Adult Services

On June 22, 2021, Sacramento County Department of Child, Family & Adult Services experienced a phishing attack where an unknown threat actor obtained employee credentials to access webmail. Exposed data included names, dates of birth, and medical health information (PHI). No SSNs or financial data were involved. The county reported the incident to law enforcement and DHS, implemented technical safeguards, and offered 12 months of identity monitoring to affected individuals.