RansomwareLawGroup.com

> Cause not stated in filing

Los Angeles County Department of Public Social Services data breach investigation

The Los Angeles County Department of Public Social Services officially reported a data breach to California authorities on June 12, 2026. This filing confirms unauthorized access to its systems, potentially exposing personal information of individuals served by the agency, and has initiated an investigation into the incident and its full scope.

Filed
June 12, 2026
Regulator
California AG
People affected
Not stated
File status
Investigation Open

What the filing confirms

  • Los Angeles County Department of Public Social Services reported the incident to the California Attorney General.

Still unknown

  • Which categories of personal information were taken. The filing does not list them.
  • How many people were affected. The filing does not give a number.
  • What caused the incident beyond the description in the filing.
  • How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.

Investigation notes

On June 12, 2026, the Los Angeles County Department of Public Social Services (DPSS) filed an official notice with California regulators regarding a data breach. This notice confirms that unauthorized access to the department's systems occurred, leading to the potential exposure of personal information. The filing indicates an ongoing investigation into the incident's specifics.

The confirmed breach date is January 2, 2024, meaning unauthorized parties potentially had access to systems for over two years before the official report was filed. This significant gap between the breach's onset and the public filing raises questions about how the incident was managed and when affected individuals were first notified. Our investigation will examine the timeline of discovery, containment, and notification processes.

While the specific types of information involved in this incident have not been fully detailed in public records, the notification letters sent to affected individuals confirm that their personal data was compromised. If you received such a letter, it means your information was part of this unauthorized access. It is prudent to remain vigilant for any suspicious communications or activity related to your accounts and identity.

Organizations like the Los Angeles County DPSS are entrusted with safeguarding highly sensitive personal information. When a breach occurs, questions arise about the adequacy of their security measures and their adherence to notification requirements. Individuals whose data was exposed may have legal options to explore if negligence contributed to the incident. We are currently reviewing cases for those impacted by this data breach to help them understand their potential legal recourse.

What our attorneys examine

A cyberattack does not excuse a company from protecting the information it holds. We look at whether Los Angeles County Department of Public Social Services used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in California.

Other open files in California

Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.