Los Angeles County Department of Mental Health

The California Office of the Attorney General reported a data breach involving the Los Angeles County Department of Mental Health (DMH) on April 20, 2022. The breach occurred on October 18, 2021, and involved unauthorized access due to phishing emails affecting three employee email accounts. The types of information potentially compromised include names, addresses, dates of birth, driver's licenses, Social Security numbers, medical information, health insurance information, student identifiers, and financial account numbers.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-552740

TPRM report: https://www.rankiteo.com/company/lacdmh

"id": "lac254072825",
"linkid": "lacdmh",
"type": "Breach",
"date": "10/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Los Angeles, California',
                        'name': 'Los Angeles County Department of Mental '
                                'Health',
                        'type': 'Government'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'dates of birth',
                                              "driver's licenses",
                                              'Social Security numbers',
                                              'medical information',
                                              'health insurance information',
                                              'student identifiers',
                                              'financial account numbers']},
 'date_detected': '2022-04-20',
 'date_publicly_disclosed': '2022-04-20',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving the Los Angeles County Department of Mental '
                'Health (DMH) on April 20, 2022. The breach occurred on '
                'October 18, 2021, and involved unauthorized access due to '
                'phishing emails affecting three employee email accounts. The '
                'types of information potentially compromised include names, '
                "addresses, dates of birth, driver's licenses, Social Security "
                'numbers, medical information, health insurance information, '
                'student identifiers, and financial account numbers.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'dates of birth',
                                 "driver's licenses",
                                 'Social Security numbers',
                                 'medical information',
                                 'health insurance information',
                                 'student identifiers',
                                 'financial account numbers']},
 'initial_access_broker': {'entry_point': 'Phishing emails'},
 'post_incident_analysis': {'root_causes': 'Phishing emails'},
 'references': [{'date_accessed': '2022-04-20',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at Los Angeles County Department of Mental Health',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Phishing emails'}