Key Takeaways
- Suisun City detected a cybersecurity incident on August 7 when malicious software compromised its IT network, prompting an immediate shutdown and a state‑of‑emergency declaration on August 8.
- As of the latest update, investigators have found no evidence that personal information was accessed or exfiltrated, though the review remains ongoing.
- Most city departments and administrative offices remain closed to the public; only the water counter at City Hall is currently open for in‑person service.
- Police lobby services are temporarily relocated to the water counter (9 a.m.–5 p.m.) while the lobby undergoes a planned roof renovation.
- Public safety—police, fire, 911, and non‑emergency dispatch—continues uninterrupted via the Solano County dispatch center.
- The city is collaborating with the FBI, DHS, California Office of Emergency Services, and other regional partners to investigate, preserve evidence, and restore systems.
- No firm timeline has been given for the full reopening of City Hall or the complete restoration of affected systems; updates are posted at Suisun.com/CybersecurityUpdates.
- Residents are encouraged to use online resources where available and to visit the water counter for any in‑person needs until normal operations resume.
Overview of the Cybersecurity Incident
On the morning of August 7, Suisun City’s information technology staff detected malicious software operating within the city’s network. The presence of the malware indicated a potential breach, prompting officials to isolate the affected systems to prevent further spread. Recognizing the seriousness of the threat, the city declared a state of emergency on August 8, a procedural step that unlocks additional resources and facilitates coordination with external agencies. The shutdown of the network was a precautionary measure designed both to contain the incident and to preserve digital evidence for a forensic investigation. While the disruption caused inconvenience for residents and staff, city leaders emphasized that protecting the integrity of municipal data and ensuring public safety remained the top priorities throughout the response.
Immediate Response and Investigation
Following the network shutdown, Suisun City activated its incident response protocol, which included engaging internal IT personnel and enlisting the expertise of federal, state, and regional cybersecurity partners. The Federal Bureau of Investigation (FBI) and the Department of Homeland Security (DHS) were brought in to assist with threat analysis, while the California Office of Emergency Services (Cal OES) provided support for emergency management aspects. These agencies are helping the city conduct a thorough forensic review, identify the attack vector, and determine whether any data was exfiltrated. Investigators are also working to preserve logs and other digital artifacts that could be vital if legal action becomes necessary. The collaborative approach aims to leverage specialized knowledge that the city’s internal team may not possess, thereby accelerating the investigation and improving the chances of attributing the attack.
Assessment of Personal Data Impact
A central concern for residents and officials alike has been whether the cyber incident compromised personal information such as addresses, Social Security numbers, or financial data. In its Friday statement, the city reported that, to date, investigators have found nothing indicating that personal data was affected. This preliminary finding is based on the initial examination of system logs, file access records, and malware behavior. However, officials cautioned that the investigation is still ongoing and that a definitive conclusion will only be reached after a comprehensive review of all potentially impacted systems. The city has pledged to notify the public promptly should any evidence of personal data exposure emerge, underscoring its commitment to transparency throughout the process.
Temporary Adjustments to Public Services
Because the city’s primary IT infrastructure remains offline, many administrative functions that rely on networked systems have been suspended for in‑person visitors. The Planning, Building, Housing, Finance, Human Resources, and Public Works departments, along with the City Manager’s Office and general administration, are currently closed to the public. Employees in these divisions are working remotely where possible or focusing on internal tasks that do not require network access. The only city service that remains open for face‑to‑face interaction is the water counter located at City Hall. This counter continues to handle utility payments, account inquiries, and other water‑related matters, providing residents with a limited but essential point of contact during the recovery period.
Police Assistance Relocation
In addition to the broader administrative closures, the Police Department lobby is slated to close temporarily due to a previously scheduled roof renovation. To ensure that residents seeking police‑related assistance are not left without support, the city has arranged for a police representative to be stationed at the City Hall water counter from 9 a.m. to 5 p.m. each day. The officer on duty will help with routine matters such as ticket sign‑offs, vehicle releases, general inquiries, and facilitation of conversations with sworn officers when needed. This temporary setup aims to maintain accessibility for essential police services while the lobby undergoes its planned improvement work. The city has indicated that further updates regarding the lobby’s reopening will be shared next week.
Continued Public Safety Operations
Despite the disruption to municipal IT services, Suisun City’s public safety agencies remain fully operational. Police officers continue to patrol the community, respond to emergency calls, and conduct investigations as usual. Fire personnel maintain their readiness to address fires, medical emergencies, and other hazards. Critical communications—including 911 calls and non‑emergency lines—are being routed through the Solano County dispatch center, which operates independently of the city’s compromised network. This arrangement ensures that residents experience no degradation in emergency response times or the availability of first‑responder services. The city has emphasized that the continuity of public safety operations is a top priority and that all necessary measures are in place to sustain them throughout the recovery process.
Coordination with Federal and State Agencies
The city’s response has been characterized by active collaboration with a range of external partners. Besides the FBI and DHS, Suisun City is working with the California Office of Emergency Services, local law‑enforcement agencies, and regional cybersecurity task forces. These partnerships facilitate information sharing, provide access to advanced analytical tools, and help align the city’s actions with state and federal guidelines for incident management. The involvement of these agencies also brings additional oversight, which can enhance public confidence that the investigation is being conducted thoroughly and impartially. Officials have noted that the collaborative framework is instrumental in both addressing the immediate incident and strengthening the city’s long‑term cybersecurity posture.
Restoration Timeline and Communication Channels
As of the latest update, Suisun City has not announced a specific date for the full reopening of City Hall or the complete restoration of all affected systems. The complexity of the malware removal, system hardening, and validation processes means that officials are proceeding cautiously to avoid prematurely reintroducing vulnerabilities. In the meantime, the city has established a dedicated webpage— Suisun.com/CybersecurityUpdates—where residents can find Frequently Asked Questions, status reports, and guidance on accessing available services. Regular updates are promised, with the next batch expected early the following week. By centralizing communication, the city aims to reduce speculation and keep the community informed about progress, upcoming changes, and any actions residents may need to take.
Next Steps and Community Guidance
Looking ahead, Suisun City officials stress that the investigation will continue until a definitive conclusion can be drawn about the scope and impact of the breach. Efforts to restore networks will prioritize critical infrastructure first, followed by less‑essential systems, with rigorous testing at each stage to ensure security. Residents are encouraged to utilize online services where possible, to direct any in‑person needs to the water counter, and to remain vigilant for phishing attempts or other scams that sometimes emerge after high‑profile cyber events. The city also reminds the public that, should they suspect identity theft or fraud related to the incident, they should report it promptly to the appropriate authorities and consider placing fraud alerts on their credit files. Through sustained transparency, coordinated response, and clear guidance, Suisun City aims to navigate this challenge while maintaining trust and safety for its community.