{"id":1002216,"date":"2026-08-15T10:55:33","date_gmt":"2026-08-15T10:55:33","guid":{"rendered":"https:\/\/www.europesays.com\/us\/1002216\/"},"modified":"2026-08-15T10:55:33","modified_gmt":"2026-08-15T10:55:33","slug":"small-california-city-baffled-by-cyberattack-that-crippled-city-hall","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/us\/1002216\/","title":{"rendered":"Small California city baffled by cyberattack that crippled city hall"},"content":{"rendered":"\n

No one, it seems, knows why cyberattackers would target Suisun City, a sleepy, marsh-front suburb of 29,000 people on the northeast outskirts of the San Francisco Bay Area.<\/p>\n

But target it, they did, with crippling effects. Whoever they are.<\/p>\n

Before sunrise on Aug. 7, the city\u2019s information technology network was infected by<\/a> malicious software that hit critical public safety operations, including police and fire dispatch and critical records, officials say. <\/p>\n

It could be Halloween before all compromised systems are fully restored, said City Manager Bret Prebula, who added that it is unclear who the bad actors are.<\/p>\n

\"City <\/p>\n

City Manager Bret Prebula says it could take months before computer systems are fully restored.<\/p>\n

\u201cThe hard part of this,\u201d he said, \u201cis we may never know the \u2018why.\u2019\u201d<\/p>\n

Suisun City has scrambled in the wake of the attack. It shut down its entire IT department. The City Council declared a state of emergency<\/a>. Its glass-domed City Hall was closed for a week. And municipal 911 dispatchers moved to the Solano County dispatch center in neighboring Fairfield. <\/p>\n

The breach is the latest blow to a struggling small city that has faced years of severe budget deficits, pushing<\/a> it to the brink of insolvency<\/a>, as well as chronic understaffing<\/a> in its police, fire and other municipal departments. Prebula worries about burnout among staffers, who are handling the crisis on top of their daily workload.<\/p>\n

\u201cIt\u2019s like a duck on the pond,\u201d he said. \u201cIt\u2019s going to look calm to the community because it\u2019s our job to deliver those services in these times. But we are moving in various directions under the water that no one sees. Staff is having to do probably twice the amount of work to get the same things done.\u201d <\/p>\n

City officials say the U.S. Department of Homeland Security and the FBI are investigating. The Department of Homeland Security did not respond to requests for comment. And the FBI office in Sacramento \u2014 in true FBI fashion \u2014 said in an email that it was \u201cunable to confirm or deny the existence of an investigation.\u201d <\/p>\n

There\u2019s a whole lot of intrigue in Suisun City. But not a lot of answers. Baffled residents, who don\u2019t know whether their data have been stolen or compromised, have been trying their best to fill in the blanks.<\/p>\n

\"Mayor <\/p>\n

Joan Pivarnik, 72, was working on a 2,000-piece Disney jigsaw puzzle and binge-watching the BBC documentary series \u201cQueens That Changed the World\u201d on Aug. 8 when a friend called to ask if she had heard about the hack. She hadn\u2019t.<\/p>\n

\u201cI was like, \u2018Whaaaat?!\u2019\u201d said Pivarnik, a grandmother of four. \u201cSo, I called 911 here in Suisun and said, \u2018Is this real or is this a hoax?\u2019\u201d<\/p>\n

The dispatcher told her it was indeed very real and that emergency calls were being rerouted to the county.<\/p>\n

\u201cI\u2019m just kind of shocked that it\u2019s happening here in Suisun,\u201d Pivarnik said. \u201cI thought no one knew of us. We are vulnerable. What do we have? We don\u2019t have anything.\u201d<\/p>\n

Pivarnik moved to Suisun City in 2008, drawn by \u201ca very cute, affordable apartment\u201d for rent. Sure, the city has its financial problems, she said, but it\u2019s \u201ca quaint, lovely little town\u201d that has come a long way since the 1980s and 1990s, when crime was rampant, and the place was truly run-down. (Back then, City Hall operated from a trailer<\/a> with its own DMV-registered license plate, and the San Francisco Chronicle rated the city as the worst place to live<\/a> in the Bay Area.) <\/p>\n

Pivarnik worries about her personal data being stolen in the breach, noting: \u201cIt\u2019s not like I have money. But I have my livelihood.\u201d<\/p>\n

Her friend, Russell Dorsey, was scrolling YouTube last weekend when a video<\/a> from a Houston-based commentator popped up with an eyebrow-raising title: \u201cBREAKING \/ U.S. CITY SHUTDOWN!! FBI Investigates New Attack (State of Emergency).\u201d <\/p>\n

The thumbnail image showed a red skull, a power transmission tower \u2014 and an Iranian flag. The host, who asked viewers to \u201cdrop praying hands\u201d emojis in the comments to support all those affected by the hack, cited a California Post article with a headline<\/a> about \u201cchaos\u201d in Suisun City.<\/p>\n

1 <\/p>\n

\"A <\/p>\n

2 <\/p>\n

\"A <\/p>\n

3 <\/p>\n

\"A <\/p>\n

1.<\/strong> A closed notice is displayed on the door of City Hall. 2.<\/strong> The Suisun City Fire Department. 3.<\/strong> The Suisun City police station. <\/p>\n

Dorsey, an electrical contractor and retired master sergeant who served with the U.S. Air Force and Navy, said there was no palpable chaos and that, for days, most residents weren\u2019t even aware of the issue. He was amused by the national attention and the assumption that Iran was behind the cyberattack. <\/p>\n

\u201cI\u2019m like, \u2018Really? Why would Iran care about Suisun?\u201d said Dorsey, 58, who joked that \u201cI don\u2019t think any Iranian wants my credit card information.\u201d<\/p>\n

Going after internet technologies that control communications within public safety agencies would be a new frontier for cyberattackers, including those that federal agencies believe could be affiliated with Iran<\/a>.<\/p>\n

In late July, the FBI and Environmental Protection Agency warned that cyberattackers had remotely accessed online infrastructure for water and wastewater systems in at least seven states<\/a>, and the Cybersecurity and Infrastructure Security Agency warned that<\/a> \u201cthreat actors are targeting water entities of all sizes.\u201d<\/p>\n

Water systems in smaller communities often rely on internet-connected automated systems, with many lacking the resources to provide adequate security. More than 30 systems in Minnesota were affected by a coordinated cyberattack<\/a> last month. <\/p>\n

The Suisun City attack did not impact the local water system, said Michael Elm, a city spokesman. The city facilitates billing, but water is provided by a separate, unaffected entity<\/a>: the Suisun-Solano Water Authority, a joint powers authority between the municipality and the Solano Irrigation District.<\/p>\n

\"Candidate <\/p>\n

Katrina Garcia, a City Council candidate.<\/p>\n

In a statement, the California Governor\u2019s Office of Emergency Services said it was working closely with Suisun City officials and federal agencies to respond to the crisis.<\/p>\n

\u201cThis event is part of a growing trend of cyber attacks, particularly AI-driven attacks, that are becoming faster and more sophisticated,\u201d the statement read. \u201cAs this threat grows, California is bolstering its defenses accordingly.\u201d<\/p>\n

In March, a cyberattack<\/a> briefly paralyzed municipal systems and prompted an emergency declaration<\/a> in Foster City, a Bay Area suburb of 32,000 people. In response to questions from The Times about whether the breach remained under investigation or the attacker had been identified, Austin Walsh, a Foster City spokesperson, said the city would not comment. <\/p>\n

In Suisun City, the attack \u2014 and the lack of answers about what or who caused it \u2014 comes at a time when townsfolk already are primed to be suspicious. <\/p>\n

Multiple residents told The Times that they fear the cyberattack is somehow linked to the only other thing that seems to garner headlines<\/a> about Suisun City: a high-profile plan<\/a> by a company called California Forever \u2014 which is backed by Silicon Valley tech billionaires \u2014 that wants to build a new city of up to 400,000 people from scratch on scrubby grasslands just east of city limits.<\/p>\n

\"A <\/p>\n

A construction site is visible from Almond Gardens, a neighborhood with affordable housing, in Suisun City, CA on August 11, 2026.<\/p>\n

Katrina Garcia, who is running for a seat on the City Council in Suisun City, said she had received numerous calls in recent days from residents concerned the cyberattack might be linked to California Forever, because it otherwise made no sense for the cash-strapped city to be targeted.<\/p>\n

\u201cWe are a small little city,\u201d she said. \u201cHow would it benefit a cyberattacker? You can hit New York \u2014 that\u2019s a big deal. But a 4-square-mile city? How does it benefit them?\u201c<\/p>\n

Suisun City officials are considering a controversial plan<\/a> to expand the city\u2019s boundaries<\/a> by annexing more than 22,000 acres of land owned by California Forever \u2014 a proposal that would allow the company to sidestep<\/a> restrictions for development on unincorporated Solano County land<\/a>. <\/p>\n

Plans for the new city were long shrouded in secrecy. About eight years ago, a California Forever subsidiary called Flannery Associates started buying up farmland, eventually spending about $950 million on some 70,000 acres, the New York Times reported<\/a>. <\/p>\n

The company for years routinely refused to answer questions about its investors, who were later revealed to be<\/a> titans of the tech industry \u2014 including LinkedIn co-founder Reid Hoffman, venture capitalist and Netscape co-founder Marc Andreessen, and siblings Patrick and John Collison, who founded the payment-processing company Stripe \u2014 all led by former Goldman Sachs trader and real estate developer Jan Sramek.<\/p>\n

Because so much of the land is near Travis Air Force Base, some residents and elected officials speculated that Flannery Associates<\/a> \u2014 before its backers became known \u2014 was a front for foreign investors who wanted to spy on the military facility. <\/p>\n

Prebula, the city manager, said he was well aware of speculation that the cyberattack was somehow connected to California Forever. There is, he said, \u201cnothing that we\u2019ve seen or come across that links it\u201d to the company or its proposals. <\/p>\n

Julia Blystone, a spokeswoman for California Forever, said in an email that the company had no connection to the response to the breach.<\/p>\n

\"Several <\/p>\n

People fish downtown, across from Suisun City Hall.<\/p>\n

Garcia said that before the attack, residents were already alarmed by a May news release <\/a> from the city manager of neighboring Rio Vista, who warned that the project and potential annexation could open the door to a giant data center being built. <\/p>\n

Suisun City officials<\/a> and California Forever<\/a> have said data centers are not part of the plan. <\/p>\n

\u201cThere\u2019s been a lot of debate \u2014 a lot of, \u2018What\u2019s really going on?\u2019 \u2014 and now all of a sudden we get a cyberattack,\u201d Garcia said. \u201cThese things keep happening that are national news, and we\u2019re just this little city. It\u2019s definitely creating suspicion.\u201d<\/p>\n

Times staff writer Stephen Battaglio contributed to this report.<\/p>\n","protected":false},"excerpt":{"rendered":"No one, it seems, knows why cyberattackers would target Suisun City, a sleepy, marsh-front suburb of 29,000 people…\n","protected":false},"author":3,"featured_media":1002217,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[5123],"tags":[8991,296511,1582,276,93619,67887,638,401324,14461,401323,12783,401322,2961,224,5337,11449,290,345409,443,527],"class_list":["post-1002216","post","type-post","status-publish","format-standard","has-post-thumbnail","category-los-angeles","tag-attack","tag-breach","tag-ca","tag-california","tag-california-governor","tag-city-official","tag-company","tag-crippled-city-hall","tag-cyberattack","tag-cyberattacker","tag-fbi","tag-joan-pivarnik","tag-la","tag-los-angeles","tag-losangeles","tag-resident","tag-state","tag-suisun-city","tag-system","tag-water"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@us\/117099164806688278","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/1002216","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/comments?post=1002216"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/posts\/1002216\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media\/1002217"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/media?parent=1002216"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/categories?post=1002216"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/us\/wp-json\/wp\/v2\/tags?post=1002216"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}