County of Los Angeles Department of Mental Health

Los Angeles County Department of Mental Health experienced a phishing incident on October 19, 2021, where three employee email accounts were compromised via malicious links. The incident potentially exposed personal information including names, addresses, SSNs, driver's licenses, medical/health information, and financial account numbers. The organization notified law enforcement, reset credentials, and deployed additional security measures. Notification was delayed at the request of law enforcement.

County of Los Angeles Department of Mental Health reported to HHS on 2022-04-20 a Hacking/IT Incident (email phishing attack) affecting 5,129 individuals. An employee was the victim of a phishing attack compromising PHI including names, addresses, dates of birth, Social Security numbers, diagnoses, and other treatment information. Breached information located on Email. The CE notified HHS, affected individuals, and the media, implemented additional safeguards, and offered credit monitoring. OCR provided technical assistance.

Affected (this filing):