Information from 200,000 individuals was confirmed by the Los Angeles County Department of Public Health to have been stolen following a successful phishing attack that compromised 53 employees’ credentials, reports SecurityWeek. Hacked credentials were leveraged by the attackers to exfiltrate individuals’ names, birthdates, Social Security numbers, health insurance details, diagnosis, prescriptions, patient IDs, Medicare/Med-Cal numbers, medical record numbers, and other financial data, according to the DPH, which emphasized that all affected email accounts and all websites involved in the campaign have since been deactivated and blocked, respectively.

Source: SC Magazine