_Andrea_Danti_Alamy.jpg?disable=upscale&width=1200&height=630&fit=crop)
June 17, 2024 at 03:56PM
The Los Angeles County Department of Public Health suffered a phishing attack on Feb. 19-20, leading to the compromise of 53 employees’ credentials and personal information of over 200,000 people. After disabling affected email accounts, the department launched an investigation and notified law enforcement. Potentially accessed sensitive information includes medical records, Social Security numbers, and financial data. Affected individuals will receive one year of identity monitoring. For inquiries, individuals can call 1-866-898-4312.
From the meeting notes, it is clear that the Los Angeles County Department of Public Health experienced a phishing attack where a threat actor accessed the credentials of 53 public health employees between Feb. 19 and 20. This led to the compromise of personal information of more than 200,000 individuals. The department took immediate action by disabling affected email accounts, resetting and reimaging user devices, and blocking identified phishing websites. Despite not being able to confirm whether the information has been accessed or misused, the department is encouraging affected individuals to review their medical record information with their medical provider. It is also offering one year of identity monitoring service through Kroll and providing a hotline for individuals to inquire if they have been impacted. The department will notify impacted individuals by mail.