Foster City Battles Ransomware Attack, Restoring Critical Services

Got story updates? Submit your updates here. ›

The city of Foster City, California, is working to restore municipal services after a ransomware attack disrupted key systems, forcing a local state of emergency. While phone and email are operational again, and 911 and police dispatch have remained fully functional, the city is still in the process of bringing all virtual access and services back online.

Why it matters

Ransomware attacks on local governments have become increasingly common, exposing vulnerabilities in municipal infrastructure and the critical need for robust cybersecurity measures. The disruption in Foster City highlights the real-world impact these attacks can have on essential public services.

The details

The ransomware attack on Foster City's government systems forced officials to declare a local state of emergency, temporarily disabling phone, email, and virtual access to city services. While 911 and police dispatch have remained operational, the city has been gradually restoring other key functions, with City Hall now open with limited services. Authorities are working to fully bring all systems back online and investigate the source of the attack.

• On March 25, 2026, a ransomware attack disrupted Foster City's municipal systems.
• The city declared a local state of emergency in response to the attack.
• As of March 29, 2026, phone and email services have been restored, and City Hall is open with limited services.

What’s next

Authorities in Foster City are continuing to investigate the source of the ransomware attack and work to fully restore all city services and systems.