County of Contra Costa, California experienced an email phishing incident resulting in unauthorized access to two email accounts between September 19 and September 20, 2022. The attacker accessed emails and attachments containing names, Social Security numbers, driver's license numbers, government IDs, medical information, and health insurance information. The County secured the accounts, launched an investigation, implemented enhanced monitoring, and offered 12 months of Experian IdentityWorks to affected individuals.