Phishing Attack Compromises Personal and Health Data of Patients in Los Angeles Healthcare System

In February, healthcare providers in Los Angeles were left vulnerable to a phishing attack that compromised the personal and health data of patients. The Los Angeles County Department of Health Services, the second largest healthcare system in the United States, was the target of this successful attack. On February 19th and 20th, malicious emails were sent to employees, allowing hackers to gain access to their email accounts.

The compromised email accounts contained sensitive information including patients’ names, birthdates, home and email addresses, phone numbers, medical record numbers, client identification numbers and medical details. Fortunately, Social Security numbers and financial data were not impacted by the breach. In response to the attack, the LA County Health Services department took immediate action by resetting all affected employee email accounts and implementing stricter security measures for detecting suspicious emails.

While there has been no evidence of misuse of stolen data yet, those affected by the breach are advised to closely monitor their medical records with their healthcare providers. It is important for them to stay vigilant and report any suspicious activity related to their personal information promptly. The incident serves as a reminder of how vulnerable our personal information can be when we receive unsolicited emails from unknown sources.