Cyber Incident Victim: Suisun City
Timeline
Summary
Suisun City experienced a cyber incident when malicious software infected its IT network early one morning, prompting a state of emergency declaration. The infection disrupted 911 call routing, police and fire dispatch, and access to records, leading the city to shut down its entire IT network to contain the threat and preserve evidence for a federal investigation. As a result, online services and internal operations were temporarily unavailable and City Hall remained closed, although police and fire services could still respond to 911 calls through Solano County dispatch. While the city has not confirmed the attack type, indicators point to ransomware, and the event fits a rising pattern of cyberattacks targeting local government entities.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Around 5:45 a.m. on August 7, malicious software infected Suisun City’s IT network, marking the beginning of the cyber incident. The infection quickly disrupted critical services such as 911 call routing, police and fire dispatch, and access to municipal records. City officials observed the disruption and initiated an assessment of the affected systems. As a result of the infection, online services and internal operations became temporarily unavailable. The city’s ability to retrieve and manage records was impaired, affecting routine administrative functions. Police and fire agencies continued to respond to emergency calls through Solano County dispatch despite the local network outage.
To contain the threat and preserve evidence for a federal investigation, Suisun City shut down its entire IT network. This action led to the closure of City Hall, impacting various departmental operations and preventing public access to online services. Although the city has not confirmed the exact nature of the attack, available indications suggest it may be ransomware‑related. The incident is part of a broader pattern of cyberattacks targeting local government entities, as seen in recent incidents affecting the City of Coweta, Oklahoma, and Washburn County, Wisconsin. Experts note that such attacks are not isolated events but reflect an increasing trend against municipalities with limited cybersecurity resources.