County of Los Angeles Department of Mental Health

Los Angeles County Department of Mental Health notified individuals that their personal information may have been accessed following a cyberattack on the City of Gardena Police Department on January 22, 2024. Threat actors exploited a multi-factor authentication vulnerability (push notification spam) to access a GPD employee's Microsoft Office 365 account, then used email exchanges to compromise a DMH employee's account. Affected data includes names, dates of birth, SSNs, addresses, phone numbers, and medical record numbers. No evidence of misuse was found. DMH disabled accounts, reset credentials, engaged forensic specialists, and notified Microsoft.

County of Los Angeles Department of Mental Health reported to HHS on 2024-03-22 a Hacking/IT Incident affecting 1408 individuals. Breached information located on Email. An employee was phished, compromising PHI including names, addresses, DOB, SSN, and treatment info. CE provided credit monitoring and retrained staff.

Affected (this filing): 1,408

On March 20, 2024, the Los Angeles County Department of Mental Health experienced a phishing incident where an employee scanned a QR code from a malicious attachment, granting an external actor access to their Microsoft Office 365 account. The incident potentially exposed personal information including names, dates of birth, SSNs, addresses, phone numbers, medical record numbers, health insurance info, and treatment information. The department disabled affected accounts, reset credentials, engaged forensic specialists, and notified law enforcement and Microsoft. No evidence of data misuse was found.

County of Los Angeles Department of Mental Health reported to HHS on 2024-05-20 a Hacking/IT Incident affecting 1598 individuals. Breached information located on Network Server. An employee was the subject of an email phishing scheme that affected PHI including names, dates of birth, and Social Security Numbers. The entity provided credit monitoring and implemented additional safeguards.

Affected (this filing): 1,598