Topline:
The L.A. County Department of Mental Health announced Friday that it was the victim of a phishing email attack in October that may have compromised some clients' names, addresses and Social Security numbers.
The department said up to 1,284 clients may have been affected by the data breach.
What happened: According to the department, a malicious actor or actors accessed the Microsoft account of an employee on Oct. 17 by using a tactic known as push notification spamming. The department said in a press release that it hired a “nationally recognized” forensic firm, and on Oct. 24 determined that certain emails or attachments contained information, including names accompanied by one or more of the following: dates of birth, addresses, telephone numbers, Social Security numbers, and client record numbers.
Call center: DMH has set up a dedicated call center for clients who have questions or want to know if they were affected. Clients can call 866-983-5589, Monday through Friday from 6 a.m. through 3:30 p.m. PST.
What’s next: DMH said it regrets any inconvenience the breach may have caused. The department said it’s taking action to increase the security of its computer systems.
The department did not disclose why the data breach wasn't publicly announced until two months after it occurred.