LA County DPSS Data Breach Exposes Sensitive Client Records

The Los Angeles County Department of Public Social Services (DPSS), a vital agency serving vulnerable residents, recently reported a data breach to the California Attorney General on June 12, 2026. This security incident, which took place on January 2, 2024, has placed deeply personal and financial details of its clients at risk. Our team is closely monitoring the situation as more details emerge about the cause and full impact of this exposure.

The compromised data is extensive and includes Full Name, Social Security Number, Date of Birth, and Home Address. Further exposed categories are Income and Employment Verification Records, Medi-Cal and Health Benefit Eligibility Information, Banking and Direct Deposit Details, and Household Composition Data. This combination of highly sensitive information makes the breach particularly severe for those affected.

For individuals whose data was exposed, the implications are profound. The inclusion of Social Security Numbers, dates of birth, and banking details creates a clear pathway for comprehensive identity theft and financial fraud. Bad actors could exploit this information to open fraudulent credit lines, intercept essential government benefit payments, or file fraudulent tax returns, causing immense financial and emotional distress.

As a public entity operating in California, the Los Angeles County Department of Public Social Services is legally obligated to protect the sensitive personal information it collects. California statutes, such as the Confidentiality of Medical Information Act (CMIA) and the Information Practices Act, mandate robust security measures. The occurrence of a data breach suggests a potential failure in upholding these critical data security responsibilities.

If you have received a data breach notification letter from the Los Angeles County Department of Public Social Services, it confirms that your confidential information was compromised. Under California law, this notification provides you with legal standing to explore potential remedies. You do not need to have already experienced financial loss or identity theft to pursue legal action, as the increased risk of future harm is often sufficient.

Our dedicated legal team investigates data breaches on a contingency fee basis. This means there are no upfront costs for you, and we only get paid if we successfully recover compensation on your behalf. We believe affected individuals deserve to understand their legal options and hold accountable those responsible for failing to protect their personal data.