Full Breakdown
Suisun City Declares State of Emergency After Cyberattack Disrupts 911 and Municipal Systems
8/9/2026, 9:05:31 PM
Core Event
At approximately 5:45 a.m. on August 7, malicious software infected Suisun City’s IT network, forcing officials to shut down the system. The shutdown disabled 911 call routing, police and fire dispatch, records management, and online city services. By the next morning, the City Council met, voted unanimously, and declared a state of emergency under Government Code 8630 to access emergency support resources.
Background & Context
The attack is the first known incident in Solano County where a cyber intrusion directly compromised local public-safety IT infrastructure. Earlier county incidents, such as an April 2024 library network disruption and a NorthBay Health intrusion, involved ransom demands, but no ransom or data exfiltration has been disclosed in the Suisun breach.
Timeline
- August 7, 2026 – 5:45 a.m.: Malware detected; city shuts down its IT network.
- Friday evening: City posts notice that City Hall and public-safety departments are affected.
- Saturday (following day): Special City Council meeting at 11 a.m.; unanimous emergency declaration; Emergency Operations Center activated.
- Saturday onward: Dispatch moved to Solano County’s secondary emergency dispatch center; FBI, DHS, and California Office of Emergency Services join the investigation.
- Beyond 24 hours: Online services remain offline while forensic analysis continues.
Data & Statistics
- Population served: ~30,000 residents.
- Location: ~45 miles from San Francisco and Sacramento.
- Systems impacted: citywide IT network, 911 routing, police and fire dispatch, municipal records, and online citizen services.
Official Statements & Responses
Dispatchers began routing 911 calls through the Solano County center to maintain response capability. The city shut down its network to contain the threat and preserve evidence. Coordination continues with the FBI, DHS, and the California Office of Emergency Services, while the Emergency Operations Center oversees response and recovery.
Why It Matters / Impact
The incident highlights the vulnerability of municipal systems that often run on aging infrastructure with limited cybersecurity budgets. Disruption of 911 routing underscores the importance of regional mutual-aid agreements, such as the backup dispatch arrangement with Solano County, for public-safety continuity during cyber crises.
Conflicting Reports & Gaps
- Method of entry: Not disclosed.
- Perpetrator identity: No suspect identified.
- Data compromise: City has not confirmed any data theft or ransom demand.
The investigation remains active, and the city directs residents to its cybersecurity updates page for future information.
