Los Angeles County Dept of Public Health experienced a phishing attack between Feb 19-20, 2024, where an external actor gained credentials for 53 employees via a malicious link. Compromised data may include names, DOB, SSN, diagnoses, prescriptions, medical record numbers, and insurance info. DPH disabled accounts, reset devices, and offered one year of identity monitoring via Kroll. Law enforcement was notified.