US: Suisun City hit by malware attack

Suisun City, California, declared a state of emergency after a malware attack disrupted 911, police and fire dispatch, and other essential municipal services. At the same time, the FBI and the EPA warned that incidents involving water and wastewater services had been reported in at least seven U.S. states since July 27, 2026.

What impact did the attack have on Suisun City?

The city did not detail any other specific effects in the available material, but the disruption reached functions critical to emergency response and municipal operations. The emergency declaration shows the pressure these incidents can place on local governments when communication and dispatch systems are affected.

What did the FBI and EPA notice say about water and sanitation?

The FBI and the EPA issued a joint notice saying that, since July 27, 2026, incidents had been reported in water and wastewater services in at least seven U.S. states. They said some of that activity had degraded water operations.

What states and reports does the wave of incidents mention?

Tenable reported on those attacks in Minnesota and said there was no public attribution to any specific actor in that case. The BBC added that, in addition to Minnesota, local authorities in New Jersey, South Dakota, and Georgia said they had been attacked in a similar wave of incidents against water systems.

Do we know who was behind the campaign?

El Español reported that U.S. authorities had not publicly attributed the campaign to any specific gang and that the investigation still lacked definitive forensic evidence.

What preventive measures were taken?

In that context, Moncloa reported that, according to the FBI and EPA notice, some plants were operating manually and boil-water advisories were issued in certain areas, although no contamination of the supply had been confirmed.

What investments were made to strengthen protection?

In that context, Diario Bitcoin reported that New York allocated $9 million to protect 153 water systems from cyberattacks.

The available material points to two clear developments. One is that a California city had to declare an emergency after an attack cut off essential services. The other is that several water utilities in different states came under pressure in a campaign whose public attribution has still not been confirmed.