Hayward, California Hit by Ransomware Attack; No Data Breach Detected Yet The City of Hayward, California, confirmed a ransomware attack over the weekend, disrupting its website and online services. City officials detected the incident on Sunday morning and promptly took the site offline to contain the threat. While the attack has rendered the city’s website and digital portals inaccessible, authorities report no evidence of a data breach affecting personal information though forensic analysis is ongoing. Chuck Finnie, Hayward’s Communications and Marketing Officer, stated that the city is working to restore systems, a process that could take weeks. In the meantime, residents can conduct business via phone, mail, or in-person visits. Critical services, including 911 emergency dispatch, police, fire, and medical response, remain operational. The attack follows a recent ransomware incident in nearby Oakland, where hackers leaked sensitive data, including Social Security numbers. Cybersecurity experts, such as San Jose State University Professor Ahmed Banafa, warn that municipalities are frequent targets due to perceived vulnerabilities in their IT defenses. Over the past five years, ransomware attacks on U.S. cities, hospitals, and schools have cost an estimated $70 billion in downtime. California State Senator Aisha Wahab, a former Hayward City Council member, praised the city’s response but highlighted the financial challenges local governments face in bolstering cybersecurity. She called for Silicon Valley tech firms to offer discounted services and urged state agencies, including the Office of Emergency Services, to develop a comprehensive strategy to protect critical infrastructure. Hayward’s city offices and public library remain open, though library computer access is temporarily unavailable. Officials have pledged to notify individuals directly if any personal data is compromised. The city’s main phone line for inquiries is (510) 583-4000.

The City of Hayward reported a data breach involving data theft from its network on or about July 9, 2023. The breach was discovered on December 30, 2024, and affected individuals' personal information, including names. The number of individuals affected is currently unknown.