{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreib4pu5fsr47ijpbuq2l25vrnlreaybrva7et24gny3o5nwsmm5y3m",
    "uri": "at://did:plc:3mf3ql5qtnfwownblde4355r/app.bsky.feed.post/3mhhgtqpyyqa2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreicwybiznc3aczrfgdf2ntuprqainywwys2zdfrfefhavym3dm4dw4"
    },
    "mimeType": "image/webp",
    "size": 83608
  },
  "description": "Officials say 911 and police dispatch remain operational as the city moves toward an emergency declaration and probes possible data access",
  "path": "/foster-city-ransomware-california/",
  "publishedAt": "2026-03-20T02:11:11.000Z",
  "site": "https://dysruptionhub.com",
  "tags": [
    "said",
    "reported",
    "Facebook",
    "Cocoa, Florida",
    "Leavenworth, Kansas",
    "New Britain, Connecticut"
  ],
  "textContent": "Foster City, California, took most municipal services offline after staff discovered ransomware on city networks Thursday, while 911 and police dispatch remained operational, officials said.\n\nThe city said its information technology staff identified the ransomware in the early hours of March 19, prompting officials to pause public services outside emergency response functions.\n\nSFGATE reported that the city described the disruption as “widely impacting city services” and said non-emergency public services were paused, citing a city statement.\n\nOfficials provided few details about how the breach occurred or what systems were affected, saying the investigation into the scope of the incident was ongoing and that limited information would be available during the response.\n\nA screenshot of the City of Foster City’s Facebook post detailing a cybersecurity breach and citywide service disruptions, including paused non-emergency services and confirmation that 911 and police dispatch remain operational.\n\nThe city has not disclosed who may have been responsible, and no group has publicly claimed responsibility. The city did not respond to an email seeking comment from DysruptionHub.\n\nFoster City said emergency services, including 911 and police dispatch, were “functional and unaffected.”\n\nThe Foster City Police Department said its business phone lines were temporarily down and advised residents to call 911 or go to the department, which is open 24/7, if they need assistance.\n\n****Chip in once****\nIf this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.\n\nTip us\n\n****Support us monthly****\nA small monthly pledge keeps independent coverage and our reader tools online for everyone.\n\nBecome a Supporter\n\nCity communications also showed spillover into routine civic operations: a Planning Commission meeting was canceled, according to a city update.\n\nThe city warned it is possible public information was accessed, though officials said that remained uncertain. The city encouraged people who have done business with Foster City to change personal passwords and take steps to protect personal data.\n\nCity Manager Stefan Chatwin said staff were working with outside cybersecurity experts to restore systems and prevent further disruptions, and the city urged residents to follow its Facebook and X channels for updates.\n\nRecent municipal incidents show a recurring playbook: keep life-safety online, shift other services to manual workarounds, and bring in outside help while officials assess what was hit.\n\nIn Cocoa, Florida, the city declared a local emergency during an IT disruption that pushed billing and other administrative functions to workarounds, even as 911 operations continued and a leak-site claim appeared without city confirmation.\n\nIn Leavenworth, Kansas, a November outage was later confirmed by the city as a cyberattack, leaving vendor invoice processing, online permits and inspections, and emailed job applications dependent on in-person or mail options while recovery work continued.\n\nIn New Britain, Connecticut, officials said some city systems were disrupted while police and fire operations remained fully operational, with leaders emphasizing backup and manual procedures to keep emergency response running.\n\nThe City Manager’s Office said it was in the process of declaring a local state of emergency to help the city seek financial support from outside agencies for response and recovery. The city did not provide a timeline for restoring services.\n\nFoster City is a San Mateo County city on the San Francisco Peninsula.\n\n****Attribution note:**** DysruptionHub credits upstream reporting and primary sources—see citations above. If this report informed your coverage, please cite DysruptionHub with a link.",
  "title": "Foster City, California, ransomware incident halts most city services",
  "updatedAt": "2026-03-20T02:11:11.971Z"
}