Los Angeles City Office Reports Data Breach After 2025 Incident

The Office of the Los Angeles City recently reported a data security incident to the California Attorney General. The breach, which occurred in late 2025, exposed various sensitive data types for an unspecified number of individuals. An investigation into the matter is currently in a monitoring status.

State: California
Breach date: December 28, 2025
Reported: September 18, 2026

What may have been exposed

Full Name
Social Security Number
Date of Birth
Home Address
Government ID Number
Wage and Compensation Information
Direct Deposit Account Details
Telephone Number
Email Address

The Office of the Los Angeles City filed a data breach notification with the California Attorney General on September 18, 2026. This report details a security incident that took place on December 28, 2025, affecting personal information managed by the municipal entity. The investigation into the breach is presently in a monitoring phase.

The public filing specifies that the data types exposed in this incident include Full Name, Social Security Number, Date of Birth, Home Address, Government ID Number, Wage and Compensation Information, Direct Deposit Account Details, Telephone Number, and Email Address. These categories of information are commonly maintained by large administrative bodies for employees and constituents.

The compromise of such comprehensive personal and financial identifiers carries notable risks for affected individuals. The exposure of data like Social Security Numbers, Direct Deposit Account Details, and Government ID Numbers can significantly increase the potential for identity theft, financial fraud, and unauthorized access to various personal accounts.

Individuals who receive an official notification about this data breach are encouraged to remain attentive to their financial and credit activities. It is widely recommended to regularly review bank statements, credit card reports, and other financial account details for any unusual or unauthorized transactions.

Considering placing a fraud alert or a security freeze on your credit files with the three major credit reporting agencies (Equifax, Experian, and TransUnion) is another general protective measure. This can help prevent new accounts from being opened in your name without your authorization. Additionally, be cautious of any unsolicited communications that request personal information.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Replace exposed ID documents
Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: California Attorney General filing

Related data breach cases

Browse all California data breaches View the full case directory