2026 Fort Smith AR — city confirms police-system data theft & release; Interlock claims (partial)
Data compromised
Per city Sep 23 statement: unauthorized party took a portion of city data and subsequently released it; financial/accounting/customer-data/HR systems stated not involved; no evidence resident credit-card or banking info compromised. Exact inventory still under review. Interlock actor claims (~5.7 TB; >100k SSNs; police/911/water data) remain unverified.
Technical writeup
Verified City of Fort Smith statements — cybersecurity event first public Aug 16, 2026; Sep 15 administrator Jeff Dingman said threat contained; Sep 23 update confirmed unauthorized party accessed systems through the Police Department path, took a portion of city data, and subsequently released it; city did not pay ransom; financial, accounting, customer-data, and HR systems stated not involved; no evidence customer/resident credit-card or banking information compromised. City still classifying stolen files for notification obligations. Interlock ransomware claimed ~5.7 TB including police files/photos, water-system data, 911 database, and >100k SSNs via leak trackers — those actor assertions remain unverified by the city. recordsAffected 0; companyConfirmed true for confirmed theft/release (not for Interlock inventory).
Root cause
Unauthorized access via Police Department systems; city confirms data removed and later released. Interlock ransomware claimed responsibility (city has not verified actor inventory)
References
- https://talkbusiness.net/2026/09/city-of-fort-smith-no-evidence-so-far-of-customer-financial-data-acquired-in-system-hack/
- https://insight.tmcnet.com/insight/fort-smith-confirms-data-removal-as-interlock-ransomware-claims-attack-muf48dvu
- https://talkbusiness.net/2026/09/interlock-claims-responsibility-for-fort-smith-computer-system-attack/
- https://www.kuaf.com/show/ozarks-at-large/2026-09-18/ransomware-group-claims-fort-smith-attack-as-city-nears-end-of-probe