City of Foster City

Ransomware sat inside Foster City's systems from February 28 to March 25, 2026, taking names, birthdates, and health insurance numbers, and for a smaller group Social Security, passport, and medical records. Staff noticed on March 19, and the intruder kept access for six more days. The source never says how they got in, who they were, or how many people were hit. Containment meant unplugging the whole city at once, and only 911 sat outside the blast radius.