2026 Foster City, CA — ransomware; state of emergency (Mar 19); municipal IT outage
Data compromised
Not confirmed at early disclosure; city advised password hygiene pending investigation
Technical writeup
On March 19, 2026, the City of Foster City, California detected ransomware on municipal networks and took most computer systems offline as a precaution, suspending many non-emergency public services while 911 and police dispatch continued to operate. On March 23, 2026, the city council declared a state of emergency to unlock recovery resources and contracting flexibility. Officials engaged third-party incident responders; early public messaging left open whether resident or business data had been exfiltrated and urged anyone who had conducted business with the city to rotate passwords and monitor accounts out of caution.
Root cause
Ransomware on city networks (detailed strain and entry vector not fully detailed in initial disclosures)
References
- https://www.fostercity.org/community/page/foster-city-services-impacted-cyber-security-breach
- https://www.nbcbayarea.com/news/local/foster-city-state-emergency-cyber-attack/4057400/
- https://www.cbsnews.com/sanfrancisco/news/foster-city-california-ransomware-cyberattack-state-of-emergency/
- https://www.securitymagazine.com/articles/102196-security-leaders-share-thoughts-on-foster-city-cyberattack