low severity September 18, 2026 · 2 min read

The Office of the Los Angeles City Data Breach Notice (California Attorney General)

If you received a notice from The Office of the Los Angeles, here’s what the filing says was exposed, and what to do about it.

The Office of the Los Angeles City notified California residents of a data breach in a filing reported to the California Attorney General on September 18, 2026. The filing puts the incident itself on December 28, 2025.

The Office of the Los Angeles City Data Breach Notice (California Attorney General)

The Office of the Los Angeles City has confirmed that personal information belonging to some of its customers was exposed in an incident that occurred on December 28, 2025. The organisation filed its notification with the California Attorney General on September 18, 2026 — an interval of 264 days, or roughly 8.7 months.

The record does not state how many people were affected. It lists only one category of exposed data: personal information.

Personal information that cannot be replaced

Names, addresses, dates of birth, and government identifiers such as Social Security numbers or driver’s license numbers do not expire. Once they leave an organisation’s control they remain useful for identity theft, fraudulent loan applications, tax fraud, and account takeover attempts for years.

Because the filing discloses only “personal information,” the exact mix of data points is not public. Your own notification letter from the City will list which specific items were included in your record.

You’ve used today’s 5 free articles · resets tomorrow

Create a free account to keep reading

The rest of this article comes straight back — free, no card, nothing you’ve already read goes away. Then see whether your own data is exposed too: the scan on this site is free with or without an account, and the account is what keeps the result after the emailed link expires.

Reading this for a company?

GalaxyWarden Signals watches the organisations you name and emails you when one of them actually discloses — SEC 8-K Item 1.05 filings and corroborated breach records, with a JSON API. It monitors companies, not people: it does not scan you and does not remove your personal data.

See GalaxyWarden Signals →

Or make a free reader account first

Free reader account

No card, no charge. You read the blog without a limit — every article, no daily count — and it saves your exposure-scan results so you can open them again after the emailed link expires. We won’t email you anything else unless you tick the box asking us to. The next step shows what the paid plans add — free stays the first option on it.

Create a free account →

Free accounts are for personal use. If you’re reading for a company, that’s Signals (terms).

Already have an account? Log in

Report details & sourcing

Severity Low contact details only, none of them permanent

Disclosed September 18, 2026

Last reviewed September 18, 2026

Affected Unconfirmed

Data exposed Personal information (per the breach notification)

By GalaxyWarden Threat Research · Editorial & sourcing standards

Editorial & sourcing policy

GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.

Related breaches

low September 30, 2026

The Office of the Los Angeles City Data Breach Notice (California Attorney General)

Personal information that cannot be replaced

Report details & sourcing

Related breaches

ProCamps Data Breach Notice (California Attorney General)

Poppins Payroll Data Breach Notice (Vermont Attorney General)

OneMain Financial Group, LLC Data Breach Notice (Vermont Attorney General)