Key Takeaways
- Suisun City’s IT network was compromised by malicious software on August 7, prompting an immediate shutdown to contain the breach and preserve evidence.
- A state of emergency was declared on August 8; City Hall and all administrative offices remain closed to the public while officials work with federal, state, and regional agencies on recovery.
- Essential services—police, fire, and 911 dispatch—continue uninterrupted, and the Police Department lobby remains open for limited in‑person assistance.
- The closure affects multiple city departments (Planning, Building, Housing, Water, Finance, Human Resources, Public Works, and the City Manager’s Office) but does not halt core public‑safety operations.
- City officials are providing regular updates via the website Suisun.com/CybersecurityUpdates and have postponed the City Council meeting to allow staff time to restore systems securely.
- The city is using disaster‑response protocols to maintain continuity of government while balancing the need to restore functionality with the imperative to ensure cybersecurity before bringing systems back online.
Overview of the Cyber Attack and Immediate Response
On the morning of August 7, malicious software infiltrated Suisun City’s information technology network, compromising city systems and triggering an urgent cybersecurity incident. Upon detection, city officials immediately shut down the network to prevent further spread of the malware and to preserve digital evidence for investigators. The swift isolation of the IT environment was intended to contain the attack while allowing internal teams to assess the scope of the compromise. Although the city has not disclosed whether any data was exfiltrated or whether a ransom demand was made, the decision to take the network offline underscored the seriousness of the threat and the commitment to follow established incident‑response procedures.
Ongoing Closure of City Hall and Administrative Offices
In the aftermath of the breach, Suisun City declared a state of emergency on August 8 and ordered the closure of City Hall and all administrative offices to the public. City Manager Bret Prebula indicated that the shutdown would continue on a day‑by‑day basis, with reopening decisions made as recovery progresses and as information becomes available. The closure encompasses the Planning, Building, Housing, Water, Finance, Human Resources, and Public Works departments, as well as the City Manager’s Office and general city administration. While internal operations continue behind the scenes, residents are directed to alternative channels for services that cannot be performed remotely, and the city pledges to provide frequent updates throughout the week.
Impact on Specific Departments and Services
The prolonged shutdown has directly affected a broad swath of municipal functions. Planning and Building services, which handle permits and inspections, are unavailable for in‑person consultations, potentially delaying development projects. Housing and Water departments, responsible for utility billing and resident assistance, have also suspended face‑to‑face interactions. Finance and Human Resources offices, which manage payroll, benefits, and accounting, are operating remotely where possible, but certain transactions that require in‑person verification remain on hold. Public Works, tasked with street maintenance and infrastructure projects, continues essential field work through remote coordination, though administrative support such as work order processing is limited. The City Manager’s Office, central to policy implementation and inter‑departmental communication, is similarly functioning under constrained conditions.
Public Safety Continuity and Police Lobby Operations
Despite the widespread administrative disruption, Suisun City’s public‑safety agencies remain fully operational. Police officers and firefighters continue to respond to emergency and non‑emergency calls, ensuring that residents receive timely assistance. Dispatch services are handled through the Solano County dispatch center, which maintains 911 and non‑emergency call taking without interruption. The Police Department lobby stays open for limited in‑person needs, including ticket sign‑offs, vehicle releases, speaking with an officer, and general assistance. Lobby hours are Monday through Thursday from 7 a.m. to 5 p.m., with a possible lunch closure from noon to 12:30 p.m. This arrangement allows the public to access essential police services while the broader city hall remains closed.
State of Emergency Declaration and Investigation Efforts
The declaration of a state of emergency on August 8 formalized the city’s response, enabling the mobilization of additional resources and facilitating cooperation with external agencies. Suisun City is working closely with federal, state, and regional cybersecurity authorities to investigate the origin of the malware, assess any data loss, and determine whether a ransom was demanded. Although specifics of the investigation have not been released, the emphasis on preserving evidence suggests a thorough forensic analysis is underway. The city’s approach mirrors disaster‑response protocols, leveraging established communication chains and operational structures to maintain continuity of government while addressing the cyber threat.
Communication, Updates, and Future Outlook
To keep residents informed, Suisun City has established a dedicated cybersecurity updates page at Suisun.com/CybersecurityUpdates, where frequently asked questions, status reports, and guidance on accessing services are posted regularly. The City Council meeting originally scheduled for this week has been postponed to allow staff additional time to verify that necessary systems are secure and functional before reconvening. City Manager Prebula emphasized that the focus remains on sustaining essential services while staff works toward restoring the IT network. He expressed confidence that, by proceeding methodically and prioritizing security, the city will eventually resume normal operations, though he cautioned that reopening will be evaluated on a day‑by‑day basis until the network is both restored and hardened against future threats.