The Information and Referral Federation of Los Angeles County, Inc.

The California Office of the Attorney General disclosed a data breach affecting 211 LA County, occurring between March 14 and April 23, 2018, with official reporting on July 5, 2018. The incident stemmed from an employee’s misconfiguration, exposing sensitive personal data including names, Social Security numbers, and driver’s license numbers of an undisclosed number of individuals. While the investigation found no evidence of misuse or malicious exploitation of the compromised data, the exposure itself posed significant risks, such as potential identity theft or fraud. The breach highlighted vulnerabilities in internal data-handling protocols, particularly around human error, though no ransomware, external cyberattack, or further unauthorized access was confirmed. The lack of detected misuse mitigated immediate harm, but the exposure of high-value personally identifiable information (PII) remained a critical concern for affected individuals and the organization’s compliance obligations.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-137700

TPRM report: https://www.rankiteo.com/company/211-la

"id": "211943091725",
"linkid": "211-la",
"type": "Breach",
"date": "3/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Social Services / Public Health',
                        'location': 'Los Angeles County, California, USA',
                        'name': '211 LA County',
                        'type': 'Non-profit Organization'}],
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers',
                                                         "Driver's License "
                                                         'Numbers'],
                 'sensitivity_of_data': "High (SSN, Driver's License Numbers)",
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2018-07-05',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving 211 LA County, which occurred between March '
                '14 and April 23, 2018. The breach was reported on July 5, '
                "2018. The incident potentially exposed individuals' names, "
                "Social Security numbers, and driver's license numbers. An "
                'investigation revealed that the breach was caused by an '
                "employee's misconfiguration, with no evidence of misuse of "
                'the exposed information.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security Numbers',
                                 "Driver's License Numbers"],
            'identity_theft_risk': 'Potential (no evidence of misuse)'},
 'investigation_status': 'Completed (no evidence of misuse found)',
 'post_incident_analysis': {'root_causes': 'Employee misconfiguration of '
                                           'systems/data access controls'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'California Office of '
                                                       'the Attorney General'},
 'response': {'law_enforcement_notified': 'Yes (California Office of the '
                                          'Attorney General)'},
 'title': '211 LA County Data Breach (2018)',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Employee Misconfiguration'}