Cyber Incident Victim: Union City
Date:
Sep 2019
Location:
United States of America
Summary
A virus severely disrupted most city-owned computers in Union City, impacting laptops, desktops, and police department systems, particularly those used for generating reports. While emergency response operations remained largely unaffected due to reliance on external services—including a neighboring city's 911 dispatch center and county-provided fire services—the infection caused widespread operational challenges across municipal functions. The incident significantly hindered police workflows by disabling both mobile and stationary computers essential for daily operations.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around September 23, 2019, a virus infected the computer systems of Union City, California, disabling most city-owned laptops and desktop computers. The malware significantly disrupted municipal operations, particularly affecting devices used by the police department. Both mobile desktop computers in police vehicles and stationary computers within police facilities were compromised, impairing officers’ ability to generate reports. City spokesperson Lauren Sugayan confirmed the widespread infection, noting that workers were actively addressing the technical issues caused by the attack. The incident forced city employees to operate with limited computer access, though the exact duration of the disruption was not specified in available reports. No details were provided regarding the malware’s origin, propagation method, or whether it involved ransomware or data exfiltration.
Critical emergency response systems remained operational despite the infection. Union City’s 911 dispatch services continued functioning because they were managed by the neighboring city of Fremont’s systems rather than Union City’s compromised infrastructure. Fire services were similarly unaffected as they fell under Alameda County’s operational jurisdiction. This geographic and administrative separation of emergency systems prevented broader public safety failures. The city did not disclose whether external cybersecurity experts were engaged or if data backups were utilized for recovery. No information was released regarding financial costs, long-term operational adjustments, or whether the incident prompted formal investigations by law enforcement or regulatory agencies.