Incident

Foster City Declares State of Emergency Following Paralyzing Ransomware Attack


Learn More

Foster City, California, reports a cybersecurity breach on March 19, 2026, after IT staff discovered ransomware on the municipal network. 

The incident forced the city to suspend nearly all non-emergency government services and prompted City Manager Stefan Chatwin to initiate a state of emergency declaration which allowed the city to access supplementary financial support and resources from outside agencies to manage the recovery process. 

Critical emergency services, including 911 and police dispatch, remain functional. The city's communication and information technology systems were largely taken offline to prevent further spread.

The attack was detected in the early hours of Thursday morning local time when IT personnel identified suspicious activity and confirmed the presence of ransomware. In response, the city activated incident response protocols and hired independent cybersecurity specialists to assist with the investigation and network remediation. 

The number of affected individuals is not disclosed. The city has not yet confirmed if specific databases were stolen or if a ransom demand was issued. The missing information regarding the total financial impact or the specific volume of stolen data is not disclosed.

The city is currently working with the Foster City Police Department and other law enforcement agencies to determine the full scope of the intrusion.

 The city has advised the public to follow its official social media channels for updates as the investigation continues.

Foster City Declares State of Emergency Following Paralyzing Ransomware Attack