City of Sausalito

Summary

City ofSausalito's council meeting was cut short after officials detected a cyberattack attempt, which was thwarted by existing training and security measures. The city did not disclose details of the attack for security reasons but said staff and its technology contractor are assessing the scope and adding further protections. Because of the interruption, the meeting was adjourned and pending agenda items were rescheduled for later sessions.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On Tuesday, March 4, 2025, the Sausalito City Council meeting was in progress when an attempted cyberattack was detected, prompting immediate action by city officials. Mayor Joan Cox announced that a closed‑session item concerning the safety and security of the city's operations needed to be added to the agenda. After the council returned to open session, Cox stated that the meeting was being adjourned out of an abundance of caution because there was a threat that the city's internet and computers might be under cyberattack. The cyberattack attempt was described as having been thwarted due to existing training and security measures implemented by city staff.

Because the meeting was cut short, all agenda items originally scheduled for that evening were postponed to future council meetings. Among the postponed items was the resolution to form a Utility Undergrounding District on Bridgeway Boulevard between Napa and Easterby Streets. City staff, working with technology contractor Marin IT, began assessing the scope of the attempted attack and are implementing additional security measures to address the ongoing threat of cyber crime. A special City Council meeting was set for Friday, March 7, 2025, beginning at 3:30 p.m. in the City Council Conference Room, with the resolution to be considered at 4:00 p.m.

For security reasons, the City of Sausalito has not disclosed further details about the nature or origin of the cyberattack attempt. Officials indicated that authorities continue to evaluate the incident and that no other information was immediately available at the time of the reports. The city emphasized that its response relies on the training and security protocols already in place.

Sources

Sources available to members: 2 sources.