Briefs

LA County Department of Health Services Responding to Privacy Breach

 

Update on RLN’s June 17 Brief: https://tinyurl.com/privacy-breach

LOS ANGELES — The Los Angeles County Department of Health Services or DHS disclosed June 21 that on Feb. 6, 2024, it was the victim of a cyberattack in which a hacker circumvented the multi-factor authentication safeguards of an employee’s Microsoft 365 account through a method commonly referred to as “push notification spamming.” This cyberattack may have provided the attacker with access to certain personal information of approximately 47,000 individuals.

Upon discovery of the attack, law enforcement was notified of the cyberattack and initiated a criminal investigation. DHS was directed to delay notifications so as not to impede the investigation. Additionally, DHS disabled the impacted email account, reset and re-imaged the user’s device(s), blocked websites that were identified as part of the phishing campaign and quarantined all suspicious incoming emails. Awareness notifications were distributed to all DHS workforce members to be vigilant when reviewing emails, especially those including links or attachments. 

DHS conducted a comprehensive review, with the assistance of a forensic firm, to identify any personal and/or health information which may have been affected. The information identified in the potentially compromised email account may have included full name, date of birth, home address, phone number(s), e-mail address, Social Security Number, government issued ID, medical record number, health insurance information (health plan and member number), and/or medical information (e.g., diagnosis/condition, medication, treatment, dates of service). Not all of the elements listed were present for each impacted individual.

DHS has already begun notifying impacted individuals by mail. For individuals whose mailing address is not available, DHS is also posting notice on its website to provide information about the incident and steps individuals can take to protect themselves from identity theft. DHS will also notify the U.S. Department of Health and Human Services’ Office for Civil Rights, the California Department of Public Health, the State Attorney General, and other agencies in accordance with statutory requirements.

DHS has enhanced its training to identify and respond to cyberattacks and continues to strengthen its information privacy and security program.

While DHS cannot confirm whether information has been misused, individuals are encouraged to review the content and accuracy of the information in their medical record with their medical provider and be watchful for any suspicious activity on any of their accounts. Additionally, DHS has secured the services of an identity monitoring service to assist those affected with credit monitoring, fraud consultation, and identity theft restoration. 

A dedicated call center has been established for individuals with questions about the incident at 1-866-898-8099 and is available, Monday through Friday from 6 a.m. to 5 p.m. (excluding weekends and major U.S. holidays). 

Details: https://dhs.lacounty.gov/

 

Reporters Desk

Recent Posts

County to Protect Medi-Cal and CalFresh Access for 1.7 Million Residents Amid New Federal Work Requirements

The motion also calls for the expansion of workfare and volunteer opportunities across county departments…

14 hours ago

Governors Briefs: CalRx® Insulin, $11 a Pen, Will Soon be Available and Appointment Announced

This launch marks a significant step in the state's ongoing effort to lower prescription drug…

14 hours ago

Purdue Student Paper Shows Solidarity With Rival

  After the Indiana University Media School fired its director of student media and banned…

15 hours ago

POLA Lead Attorney Steve Otera Named Corporate Counsel of the Year by LA Business Journal

  LOS ANGELES — The Los Angeles Business Journal has given a top legal honor…

15 hours ago

Ports Briefs: POLB Cargo Slows as Clean Truck Study and Air Quality Report Highlight Progress

The Final 2024 Class 8 Drayage Truck Feasibility Assessment Report focuses on battery electric and…

18 hours ago

Public Health Investigating Possible Local Spread of Clade I Mpox; Third Case Confirmed in Los Angeles County

So far in 2025, Public Health has reported 118 cases of clade II mpox.

2 days ago