Los Angeles County

Los Angeles County, also referred to as LA County, is a county‑level governmental body headquartered in the United States that provides public services to the residents within its jurisdiction. As a local government it carries out responsibilities such as public safety, health services, and social programs under the authority of the state of California. The organization maintains a workforce and infrastructure to support these functions and is tasked with ensuring the continuity of essential services for the community. Over the years it has encountered several cybersecurity events that have highlighted both vulnerabilities and its response mechanisms.

In December 2018 a phishing campaign compromised the email credentials of 108 employees, potentially exposing personal data of more than 750,000 individuals; following the breach the county strengthened its security controls and offered affected persons credit monitoring and identity protection services. A December 2019 phishing attempt used a compromised third‑party account to deliver malware‑laden emails to over two dozen staff members, but the county’s IT team detected and contained the activity without any service disruption or data exposure. In January 2015 a portable digital traffic sign in downtown Los Angeles was altered to display an unauthorized message, an incident later attributed to a hack. Most recently, in November 2023 a cybersecurity breach prompted the city of Long Beach—a municipality within the county—to declare a local emergency, leading to the shutdown of its main website and the interruption of payment systems, utility call centers, and select public services; while emergency operations, trash collection, libraries, and vaccination clinics remained operational, online bill payments were suspended with late fees waived and utility shutoffs paused pending restoration. The county engaged external cybersecurity consultants and the FBI for investigation, retained $4 million in cyber insurance coverage, and directed residents to social media and a dedicated phone line for updates. These incidents collectively illustrate the organization’s ongoing exposure to cyber threats and its reliance on expert assistance, insurance, and communication channels to manage and recover from such events.