Union City

Summary

A virus severely disrupted most city-owned computers in Union City, impacting laptops, desktops, and police department systems, particularly those used for generating reports. While emergency response operations remained largely unaffected due to reliance on external services—including a neighboring city's 911 dispatch center and county-provided fire services—the infection caused widespread operational challenges across municipal functions. The incident significantly hindered police workflows by disabling both mobile and stationary computers essential for daily operations.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On or around September 23, 2019, a virus infected the computer systems of Union City, California, disabling most city-owned laptops and desktop computers. The malware significantly disrupted municipal operations, particularly affecting devices used by the police department. Both mobile desktop computers in police vehicles and stationary computers within police facilities were compromised, impairing officers’ ability to generate reports. City spokesperson Lauren Sugayan confirmed the widespread infection, noting that workers were actively addressing the technical issues caused by the attack. The incident forced city employees to operate with limited computer access, though the exact duration of the disruption was not specified in available reports. No details were provided regarding the malware’s origin, propagation method, or whether it involved ransomware or data exfiltration.

Critical emergency response systems remained operational despite the infection. Union City’s 911 dispatch services continued functioning because they were managed by the neighboring city of Fremont’s systems rather than Union City’s compromised infrastructure. Fire services were similarly unaffected as they fell under Alameda County’s operational jurisdiction. This geographic and administrative separation of emergency systems prevented broader public safety failures. The city did not disclose whether external cybersecurity experts were engaged or if data backups were utilized for recovery. No information was released regarding financial costs, long-term operational adjustments, or whether the incident prompted formal investigations by law enforcement or regulatory agencies.

Sources

Sources available to members: 1 source.