Ransomware victim disclosure
← All victimsCity of Los Angeles (LA)
Claimed by worldleaks · listed 2 months ago
Status timeline
- Listed
Mar 20, 2026
- Data leaked
At a glance
- Group
- worldleaks
- Status
- Data leaked
- Country
- United States
- Sector
- Public Sector
- Listed on leak site
- Mar 20, 2026
About the victim
AI dossier — public-source company profileThe City of Los Angeles is the largest city in California and the second-largest in the United States, governed as a municipal corporation headquartered in Downtown Los Angeles. It provides a broad range of public services including housing, transportation, public safety, utilities, and urban planning to a population of approximately 4 million residents. LA is a major global center for entertainment, technology, trade, and culture.
- Industry
- Municipal Government
- Address
- 200 N Spring St, Los Angeles, CA 90012, United States
- Employees
- 50000+
- Founded
- 1850
Attack summary
Severity: high — The victim is a major U.S. municipal government; a confirmed data_published status against such an entity implies potential exposure of PII, public-sector records, and sensitive administrative data at scale. However, the absence of any specific data inventory, proof files, or operational impact details prevents escalation to critical.The group 'worldleaks' claims to have published data belonging to the City of Los Angeles, with the disclosure status marked as 'data_published'; however, the leak post contains no specific details about the nature of the attack, what data was exfiltrated, or whether encryption occurred.
Original description
AI-summarised, not from the leak postThe City of Los Angeles, often referred to as "LA," is the largest city in the state of California, USA. It is governed as a municipal corporation known for its extensive services including housing, transportation, and public safety. LA has diverse economies ranging from entertainment (Hollywood) to technology and is a major cultural, financial, and commercial center.
Sources
Source
Indexed 2 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
