Los Angeles County Department of Mental Health

The California Office of the Attorney General reported a data breach involving the Los Angeles County Department of Mental Health on May 17, 2024. The breach occurred on March 20, 2024, due to a phishing email that compromised an employee's email account, potentially affecting personal information including names, dates of birth, social security numbers, and medical information. The number of individuals affected is currently unknown.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-585564

TPRM report: https://www.rankiteo.com/company/lacdmh

"id": "lac215072625",
"linkid": "lacdmh",
"type": "Breach",
"date": "3/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Los Angeles, California',
                        'name': 'Los Angeles County Department of Mental '
                                'Health',
                        'type': 'Government Agency'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'dates of birth',
                                              'social security numbers',
                                              'medical information']},
 'date_detected': '2024-03-20',
 'date_publicly_disclosed': '2024-05-17',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving the Los Angeles County Department of Mental '
                'Health on May 17, 2024. The breach occurred on March 20, '
                "2024, due to a phishing email that compromised an employee's "
                'email account, potentially affecting personal information '
                'including names, dates of birth, social security numbers, and '
                'medical information. The number of individuals affected is '
                'currently unknown.',
 'impact': {'data_compromised': ['names',
                                 'dates of birth',
                                 'social security numbers',
                                 'medical information']},
 'initial_access_broker': {'entry_point': 'Phishing Email'},
 'post_incident_analysis': {'root_causes': 'Phishing Email'},
 'references': [{'date_accessed': '2024-05-17',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at Los Angeles County Department of Mental Health',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}