🐻California State AGFirst filing
Filed Jan 25, 2022bd_da40ea8ba8a75f29
On June 22, 2021, Sacramento County Department of Child, Family & Adult Services experienced a phishing attack where an unknown threat actor obtained employee credentials to access webmail. Exposed data included names, dates of birth, and medical health information (PHI). No SSNs or financial data were involved. The county reported the incident to law enforcement and DHS, implemented technical safeguards, and offered 12 months of identity monitoring to affected individuals.