City of Foster City data breach
Incident readout
- Company
- City of Foster City
- Reported to
- California Attorney General
- Filed
- July 13, 2026
- People affected
- Not stated in the filing
- Incident type in filing
- Not stated
- Our review
- Investigation Open
Was this a ransomware attack?
The filing does not say ransomware was involved. We do not label an incident ransomware unless the company’s report says so. Whatever the cause, the steps to protect yourself and the legal question are the same.
What we know
The City of Foster City is a municipal government entity responsible for providing essential public services to its residents and managing local administrative operations. As a government agency, the City collects and maintains sensitive personal information, including identification records, tax-related data, utility account details, and employment information for its staff. In 2026, the City of Foster City officially reported a data breach to the California Attorney General, confirming that unauthorized access to its systems occurred. If you received a data breach notification letter from the City, it indicates that your personal information may have been compromised during this incident. This notice is intended to inform you of the event and provide guidance on the steps you should take to protect your identity and financial security.
See every breach reported in California or read what to do after a ransomware attack.
Other breaches reported in California
- ZZ Diag ProbeCalifornia Attorney General · Filed date pendingCount not stated
- STS Aviation GroupCalifornia Attorney General · Filed October 19, 2026Count not stated
- Citizens BankCalifornia Attorney General · Filed October 19, 2026Count not stated
- John G. Yphantides, a Professional Law CorporationCA Attorney General · Filed October 16, 2026Count not stated
- Neuro Wellness SpaCalifornia Attorney General · Filed October 16, 2026Count not stated
- Frazer LLPCalifornia Attorney General · Filed October 16, 2026Count not stated
Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.