Los Angeles County Department of Mental Health

The Los Angeles County Department of Mental Health (LACDMH) is the public agency responsible for providing mental health services to residents of Los Angeles County, California. As a department of one of the largest county governments in the United States, its core mission involves the delivery of a comprehensive continuum of care, including prevention, crisis intervention, outpatient treatment, and residential programs for individuals with mental health needs. The department serves a vast and diverse population across the county's extensive geographic area, operating as a key component of the local public health infrastructure. Its services are funded through a mix of county allocations, state and federal grants, and Medicaid (Medi-Cal) reimbursements, positioning it as a critical safety net provider for underserved communities. The department's operational scope encompasses direct clinical care, case management, and community outreach programs designed to increase access and reduce stigma associated with mental health conditions.

A significant event in the department's recent history occurred on October 19, 2021, when it experienced a data security incident stemming from a phishing attack. The attack was initiated via malicious emails sent from the compromised server of a trusted business partner, leading to the exposure of sensitive personal information for 5,129 individuals. The breached data included Social Security numbers, driver's license details, and protected health information such as medical records, underscoring the highly sensitive nature of the data the department manages. In response to this incident, LACDMH completed all legally required notifications to affected individuals and authorities. The department subsequently initiated a review of its security protocols and reinforced its defenses, a response that highlights the ongoing operational challenge of securing data against sophisticated phishing campaigns that exploit third-party relationships. This incident illustrates the department's role as a custodian of highly regulated personal health information and the persistent cybersecurity threats faced by large public health entities.