DataBreachLegalRights.com

The Los Angeles County Department of Public Social Services data breach: your legal rights

Los Angeles County Department of Public Social Services told the California Attorney General that people’s personal information was exposed. If you got a notice, these are the rights you have.

Get a free case review

Your rights after this breach

  • To be told about the breach

    California law requires a company that loses residents' personal information to notify them. Los Angeles County Department of Public Social Services reported this breach to the California Attorney General.

    California data breach notification law

  • To sue under California privacy law

    If certain personal information was exposed because a company failed to keep reasonable security, California residents may bring a claim for damages set by statute, even without proof of a financial loss.

    California Consumer Privacy Act, Cal. Civ. Code § 1798.150

  • To file a health privacy complaint

    Medical or insurance information is listed. You can file a complaint with the U.S. Department of Health and Human Services. That law does not let you sue directly, but state-law claims may still be possible.

    HIPAA (complaints to HHS Office for Civil Rights)

  • Limits on what you owe for fraud

    Account or card information is listed. Report unauthorized charges quickly; federal law caps how much you can be held responsible for, and the sooner you report, the lower the cap.

    Electronic Fund Transfer Act and Fair Credit Billing Act

  • To ask whether you can recover money

    If Los Angeles County Department of Public Social Services did not take reasonable care of your information, you may have a claim for negligence or under California law. An attorney can review it with you for free.

    California common law and consumer protection statutes

Rights every American has after a breach

Free case review

Tell us you got the Los Angeles County Department of Public Social Services notice. An attorney reviews it and tells you plainly whether you may have a claim.

  • Free, no obligation
  • No fee unless you recover
  • Reply within 24 hours

Got a Notification Letter? Find Out If You Qualify

Free review. No cost, no obligation.

Upload your breach letter (optional)

No attorney-client relationship is created by submitting this form. Attorney Advertising.

What Los Angeles County Department of Public Social Services reported

Reported to
California Attorney General
Date filed
June 12, 2026
People notified
Not stated
Cause in filing
Not stated

Information listed in the filing: Full Name, Social Security Number, Date of Birth, Home Address, Income and Employment Verification Records, Medi-Cal and Health Benefit Eligibility Information, Banking and Direct Deposit Details, Household Composition Data.

The Los Angeles County Department of Public Social Services (DPSS) operates as a critical municipal agency, serving as the safety net for millions of vulnerable residents across Southern California. By administering essential public assistance programs such as Medi-Cal, CalFresh food benefits, CalWORKs, and general relief, the department maintains comprehensive administrative oversight over the lives of low-income families, elderly individuals, and persons with disabilities. Fulfilling this mandate requires the collection, processing, and long-term storage of an immense volume of deeply sensitive information. Because applicants must verify their identity, income, citizenship status, housing, and medical needs to qualify for government aid, DPSS effectively functions as a massive repository of confidential personal data.

In 2026, the department reported a major security incident to the California Attorney General, highlighting vulnerabilities within its digital infrastructure or third-party vendor network. While public disclosures continue to unfold, data security incidents impacting large-scale government agencies and social service departments typically involve unauthorized external access to centralized database systems, sophisticated ransomware deployments, or security failures within legacy digital portals utilized for benefits administration. Given the vast interconnected nature of county government networks and the heavy reliance on external IT contractors, a breach often exposes systemic gaps in network segmentation, multi-factor authentication enforcement, and continuous access monitoring.

The exposure resulting from a breach of the Los Angeles County Department of Public Social Services presents catastrophic risks to affected residents, as the compromised data goes far beyond basic contact details. Victims face the imminent threat of comprehensive identity theft and financial fraud due to the exposure of core identifiers such as Full Names, Social Security Numbers, and Dates of Birth. Furthermore, because public assistance records frequently include detailed household compositions, income verifications, banking details for direct deposit benefits, and Medi-Cal medical eligibility information, bad actors can exploit these dossiers to open fraudulent credit lines, intercept government benefit disbursements, file fraudulent tax returns, and compromise private healthcare records. For a population already navigating economic vulnerability, repairing the fallout from these compromised data points creates an overwhelming financial and emotional burden.

As a public entity operating within the state of California, the Los Angeles County Department of Public Social Services is bound by stringent statutory obligations to safeguard the private information entrusted to its care. Under the California Confidentiality of Medical Information Act (CMIA), the California Information Practices Act, and broader state data security statutes, the agency has an affirmative legal duty to implement reasonable security procedures and practices appropriate to the nature of the personal information involved. The occurrence of a data breach compromising sensitive beneficiary files serves as strong presumptive evidence of a systemic failure to fulfill these statutory mandates, pointing to inadequate encryption protocols, delayed patch management, or insufficient oversight of network access privileges.

Receiving an official data breach notification letter from the Los Angeles County Department of Public Social Services constitutes formal legal acknowledgment that your confidential information was compromised due to inadequate security measures. Under California law, the receipt of this notice establishes the necessary legal standing to participate in a class action lawsuit aimed at holding the agency accountable for its negligence. Crucially, affected individuals do not need to demonstrate that they have already suffered actual financial loss or identity theft to pursue legal remedies; the increased, imminent risk of future harm is sufficient. Our law firm investigates these breaches on a strict contingency fee basis, ensuring that affected residents pay zero out-of-pocket costs and face no financial risk unless we successfully recover compensation on their behalf.

See the official filing

Other breaches reported in California

Attorney advertising. General information, not legal advice for your situation. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.