California city declares state of emergency after malware disrupts 911 routing

Suisun City, California, has declared a state of emergency after malicious software infected its information technology systems on the morning of August 7, 2026, disrupting 911 call routing, police and fire dispatch, city records, and other municipal services, according to a report by KQED. The North Bay city of roughly 30,000 residents shut down its entire computer network to contain the intrusion and preserve evidence for a federal investigation.

The malware struck around 5:45 a.m. Friday. City officials say the IT system is configured to automatically shut down when it detects an intruder, which is what triggered the network-wide outage. Suisun City Police dispatchers immediately began rerouting 911 calls through the Solano County dispatch center, and officials say there was no interruption to emergency call answering and no threat to public safety, though some internal software became unusable once the network went dark.

A Deliberate Shutdown, Not a Full Collapse

City Council members held a special meeting on Saturday, August 8, to formally declare a state of emergency — a legal step that lets Suisun City access emergency support services more quickly and recoup incident-response costs. Michael Elm of the Suisun City Public Information Office described the practical impact on residents as minor: people may be unable to pay water bills or process permits online for the time being, but daily life and public safety response are otherwise unaffected.

Officials have not publicly confirmed whether the incident involved ransomware or disclosed any ransom demand. The city says a full investigation, involving both private cybersecurity firms and government experts, was set to begin the following day. Suisun City is working with the FBI, the Department of Homeland Security, and the California Office of Emergency Services to investigate the breach and restore systems. No timeline has been given for when services will return to normal — the network will stay down while each function is individually cleared before being brought back online.

Small Cities, Familiar Targets

The incident fits a well-established pattern: municipal governments, especially smaller ones, are frequent targets for cyberattacks because they often run on constrained IT budgets and aging infrastructure while still controlling systems tied to emergency response and resident services. Attackers treat small-city networks as comparatively easy prey relative to the disruption and leverage they can generate — a 911 dispatch outage creates immediate public pressure to resolve an incident quickly, which can make municipalities more likely to pay a ransom or move fast under duress.

Suisun City joins a growing list of U.S. municipalities that have had core public-safety systems taken offline by cyberattacks in recent years. The fact that a mid-sized city needed to formally activate an emergency operations center just to keep 911 dispatch functioning underscores how thin the margin has become between routine IT security incidents and disruptions to physical public safety. As reported by KQED, the investigation is ongoing and the city has not said when normal operations will resume.