Loading story…
Suisun City, California declared a local state of emergency after a malware attack infected municipal systems and forced officials to shut down the city’s IT network. The intrusion began around 5:45 a.m. and disrupted critical services, including 911 routing, police and fire dispatch lines, and other internal municipal operations, leaving many online city services unavailable.
To maintain emergency response, dispatch operations were moved to Solano County’s second emergency dispatch center while the city worked to contain the incident and preserve evidence. Suisun City said it is coordinating with the FBI, the Department of Homeland Security, and the California Office of Emergency Services on the investigation, but officials have not disclosed how the attackers gained access or identified any responsible threat actor.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
In an August 10 update, Suisun City said police and fire services were still responding to 911 emergencies through the Solano County dispatch center. The city also said there was no imminent threat to the public, while City Hall and some city services remained unavailable due to the network shutdown.
On August 8, Suisun City declared a local state of emergency in response to the cyberattack, and the City Council unanimously approved the declaration. The measure was intended to speed access to emergency resources and support recovery-cost reimbursement.
City officials disclosed the cyber incident in a press release on Saturday. The disclosure stated that the attack had affected emergency dispatch and other municipal systems.
At about 5:45 a.m. on Friday, malicious software infected and compromised Suisun City's municipal IT systems. The incident disrupted 911 routing, police and fire dispatch lines, and other critical city operations, prompting the city to shut down affected systems or its entire IT network.
City officials said they were working with the FBI, the Department of Homeland Security, the California Office of Emergency Services, and other agencies to investigate the malware incident and restore systems. Officials had not disclosed the intrusion method or identified a responsible actor.
To maintain emergency response capabilities during the outage, Suisun City's dispatch team relocated operations to Solano County's second emergency dispatch center. Dispatchers continued handling residents' emergency calls through the county center.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
8 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourceinfosecurity-magazine.com
Open sourcecyberveille.ch
Open sourcecbsnews.com
Open sourcedysruptionhub.com
Open sourcemalware.news
Open sourcedatabreaches.net
Open sourcesuisun.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Passaic County, New Jersey reported a **malware attack** that disrupted county government **IT systems** and caused widespread **phone line outages** across offices serving a population of nearly 600,000. The county indicated phone service went down Wednesday morning and later confirmed the outage was tied to a cyber incident, stating it is working with **federal and state officials** to investigate and contain the intrusion. Officials have not publicly detailed which specific systems were impacted beyond telephony and general IT services, nor attributed the activity to a specific threat actor or confirmed ransomware. County statements also noted that other New Jersey local governments have experienced similar incidents recently, aligning with broader reporting that **municipal and county governments** have remained frequent targets of disruptive malware and ransomware operations.
Jun 29, 2026
The City of Coweta, Oklahoma said a ransomware attack caused a system-wide outage across city computers, files, and computer-based services, disrupting municipal operations while leaving the city website and a third-party online billing portal accessible. Officials said the intrusion affected city systems broadly, prompting an immediate response with the city's contracted IT provider and additional cybersecurity professionals to secure the environment, contain further intrusion, and begin recovery efforts. City officials said the Coweta Police Department and Fire Department were not affected because they operate through off-site systems, and emergency services including **911** remained operational throughout the incident. The city also said it has an **offsite backup** and plans to use it to restore data once systems are cleared and deemed safe for recovery.
Aug 10, 2026
The **University of Mississippi Medical Center (UMMC)** reported a **ransomware attack** that knocked multiple IT systems offline, including access to its *Epic* electronic health record (EHR) platform, triggering the organization’s emergency operations plan. The disruption forced UMMC to **close all 35 clinics statewide** and **cancel outpatient, elective, and clinic procedures**, while hospital and emergency services remained open under contingency operations. UMMC stated the attackers have been in communication and that it is working with external specialists and law enforcement; the **FBI is investigating** and warned the duration of the outage was unknown at the time of reporting. Separate reporting also described a different municipal incident in **Meriden, Connecticut**, where officials took city internet services and public Wi‑Fi offline after an attempted disruption; emergency services were reported as unaffected and the city said it would conduct a comprehensive review before restoring service.
Jun 29, 2026