> Cause not stated in filing
Los Angeles County Department of Public Social Services data breach investigation
The Los Angeles County Department of Public Social Services disclosed a significant data breach in June 2026, confirming exposure of highly sensitive client information. This incident places individuals relying on essential public assistance programs at increased risk of identity theft and financial fraud, underscoring critical questions about the agency's data protection measures.
- Filed
- June 12, 2026
- Regulator
- California AG
- People affected
- Not stated
- File status
- Monitoring
What the filing confirms
- Los Angeles County Department of Public Social Services reported the incident to the California Attorney General.
- Information involved: Full Name, Social Security Number, Date of Birth, Home Address, Income and Employment Verification Records, Medi-Cal and Health Benefit Eligibility Information, Banking and Direct Deposit Details, Household Composition Data.
Still unknown
- How many people were affected. The filing does not give a number.
- What caused the incident beyond the description in the filing.
- How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Investigation notes
The Los Angeles County Department of Public Social Services (DPSS) filed notice in June 2026 regarding a data security incident that occurred on January 2, 2024. This official filing confirms that sensitive personal information entrusted to the agency was compromised. The notice begins an important inquiry into the circumstances of the breach and the agency's data protection protocols.
According to the official report, the exposed data types include Full Name, Social Security Number, Date of Birth, Home Address, Income and Employment Verification Records, Medi-Cal and Health Benefit Eligibility Information, Banking and Direct Deposit Details, and Household Composition Data. This comprehensive collection of personal identifiers and financial details presents a severe risk of identity theft, financial fraud, and unauthorized access to government benefits for affected individuals.
As a public entity managing critical services, the Los Angeles County DPSS is legally obligated under California law to safeguard sensitive data. The occurrence of this breach, with a reported breach date of January 2, 2024, and a filing date of June 12, 2026, raises questions about the sufficiency of the agency's security practices and the timeliness of its notification. An investigation will examine whether appropriate security measures were in place to prevent unauthorized access and how long attackers may have had access to systems.
If you have received an official data breach notification letter from the Los Angeles County Department of Public Social Services, it serves as formal acknowledgment that your confidential information was compromised. This notification establishes a basis for understanding your legal rights. Under California law, receiving such notice can provide the standing needed to participate in a legal claim aimed at holding the agency accountable for its data security practices. Consider taking steps like monitoring your financial accounts and credit reports for suspicious activity.
Our firm is actively investigating the Los Angeles County DPSS data breach. If your personal information was exposed, we encourage you to seek a complimentary case review to understand your options. We operate on a contingency fee basis, meaning there are no upfront costs unless we recover compensation. Please remember, past results do not guarantee future outcomes, and this communication does not create an attorney-client relationship.
What our attorneys examine
A cyberattack does not excuse a company from protecting the information it holds. We look at whether Los Angeles County Department of Public Social Services used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in California.
Other open files in California
- ZZ Diag ProbeCalifornia Attorney General · Filed date pendingCount not stated
- STS Aviation GroupCalifornia Attorney General · Filed October 19, 2026Count not stated
- Citizens BankCalifornia Attorney General · Filed October 19, 2026Count not stated
- John G. Yphantides, a Professional Law CorporationCA Attorney General · Filed October 16, 2026Count not stated
- Neuro Wellness SpaCalifornia Attorney General · Filed October 16, 2026Count not stated
- Frazer LLPCalifornia Attorney General · Filed October 16, 2026Count not stated
Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.