The City of Foster City experienced a ransomware attack on its networks, which was discovered in the early hours of March 19, 2026. This incident led the City Manager's Office to issue a statement encouraging password changes and declare a state of emergency to seek financial support. The public notification was posted on July 13, 2026, and the California Attorney General was notified on the same date.
The City has not disclosed the number of affected individuals, and the specific data types compromised remain uncertain. While it is possible that public information has been accessed, this has not been confirmed. No specific data types like SSN, medical records, or financial data have been confirmed as exposed.
Investigations into the breach's extent are ongoing. Details regarding the full impact, including the exact number of affected individuals and specific data types, may emerge as the investigation concludes. Formal breach notification letters may also be sent once more information is available, but currently, limited information is publicly available.