A recent cyberattack on Suisun City has highlighted the growing cybersecurity risks facing local governments across the United States after malicious software disrupted municipal IT systems and affected the technology supporting emergency communications.
The attack, which began on August 7, 2026, prompted Suisun City officials to shut down portions of the city’s IT network and declare a state of emergency. The incident affected systems connected to 911 routing, police and fire dispatch and several municipal services, demonstrating how a cyberattack against a relatively small municipality can quickly become a public-infrastructure issue.Â
City officials said the network was taken offline to contain the threat and preserve evidence while federal and state authorities investigated the incident. The FBI, Department of Homeland Security and California Office of Emergency Services became involved in the response.
The incident has placed renewed attention on cybersecurity preparedness among local governments, particularly municipalities that operate essential services but may not have the cybersecurity resources available to larger federal agencies or major corporations.
Suisun City’s experience demonstrates that municipal cybersecurity is no longer limited to protecting databases and administrative systems. Modern city infrastructure increasingly depends on interconnected digital networks for emergency communications, public safety, water services, financial operations and citizen-facing platforms.
When those networks are compromised, the consequences can extend well beyond data loss.
The attack temporarily affected several city departments, including water, housing, public works, finance, building, planning, human resources and administration, according to local reporting. While emergency services continued operating through alternative arrangements, the disruption demonstrated the operational challenges created when municipal networks have to be isolated.
Cybersecurity experts have increasingly warned that local governments represent attractive targets because they operate valuable systems while often facing resource constraints.
The Suisun City incident follows other cyber-related events affecting municipalities in California. Earlier this year, Pittsburg, California, disclosed that it had lost nearly $914,000 through a phishing incident involving a fraudulent account impersonating a known city vendor. Most of the money was subsequently recovered.
The incident illustrates a second dimension of municipal cybersecurity: attacks do not always involve sophisticated malware or ransomware. Social engineering, phishing and business-email compromise can also create substantial financial damage.
For city governments, this means cybersecurity programmes increasingly need to cover both technical infrastructure and employee behaviour.
Authentication systems, privileged-access controls, employee training, payment verification and continuous monitoring are becoming increasingly important components of municipal security.
The growing dependence on cloud services is adding another layer of complexity. Local governments increasingly rely on third-party technology providers for communications, data storage, payment processing and software platforms, creating additional points that need to be monitored and protected.
At the national level, the Cybersecurity and Infrastructure Security Agency (CISA) continues to track and share information about evolving cyber threats affecting U.S. critical infrastructure. The agency emphasises the importance of coordinated threat intelligence and rapid response as cyber threats become increasingly sophisticated.
Artificial intelligence is also changing the cybersecurity environment.
AI can help security teams analyse large volumes of network activity, identify unusual behaviour and accelerate incident response. At the same time, attackers can use AI to automate phishing campaigns, generate convincing social-engineering messages and increase the scale of attacks.
This is creating a race between organisations attempting to automate defence and attackers attempting to automate intrusion.
San Francisco’s wider technology ecosystem is already becoming an important centre of this cybersecurity development. The Bay Area continues to attract cybersecurity startups and major security companies, with recent activity including the emergence of Glow as a cybersecurity startup valued at approximately $1.2 billion.
The region’s concentration of cybersecurity companies, AI developers and technology investors is helping drive innovation in areas such as automated threat detection, identity security and AI-powered security operations.
However, the Suisun City incident demonstrates that advanced technology alone cannot eliminate cyber risk.
Municipalities also need resilient infrastructure, offline recovery capabilities, incident-response plans and clear communication procedures so that essential services can continue when digital systems are compromised.
The importance of this resilience is particularly clear when attacks affect public safety systems. A disruption to a city’s administrative network may be inconvenient, but interference with emergency communications can potentially create much more serious consequences.
Suisun City’s response also highlights the importance of cooperation between local governments and federal agencies. Cyber incidents can quickly cross jurisdictional boundaries, requiring local authorities to work with federal investigators, state agencies and cybersecurity specialists.
As more public services become digital, the attack surface available to cybercriminals is expanding.
Municipal governments are therefore increasingly being pushed to treat cybersecurity as a core component of public infrastructure rather than simply an IT responsibility.
For Suisun City, the recent attack serves as a warning about the vulnerability of interconnected municipal systems. For other U.S. cities, it offers a timely reminder that cybersecurity preparedness must extend to the systems residents depend on every day.
The Suisun City incident shows that the next major cybersecurity challenge for American cities may not be protecting a corporation’s data centre — it may be ensuring that a resident can still call 911 when a city’s digital infrastructure comes under attack.
As municipalities continue digitising public services, investment in cyber resilience, emergency-response planning and secure infrastructure is likely to become an increasingly important part of America’s broader cybersecurity strategy.
