The City of Oakley in California has declared a state of emergency after falling victim to a substantial ransomware attack on February 22. In response, the Information Technology Division is collaborating with law enforcement, and an investigation, assisted by external cybersecurity professionals, is underway to determine the extent of the incident. Emergency services such as 911, police, fire, and ambulance remain operational, and while affected systems are offline, the city is actively working to secure and restore services. The City Manager’s declaration of a local state of emergency activates specific powers and enables the issuance of orders and regulations to address the cyber threat.
The California Governor’s Office of Emergency Services explains that declaring a state of emergency grants extraordinary powers, immunity for emergency actions, and authorizes the issuance of orders and regulations. This is crucial for activating pre-established emergency provisions and qualifies the city to request state or federal assistance if needed. While the city has yet to disclose details about the ransomware group responsible or the method of infiltration, residents are advised to expect delays in non-emergency services as officials work to revive affected systems and return to normal operations. This incident adds to a series of cybersecurity challenges faced by various Californian cities, emphasizing the persistent and evolving nature of cyber threats.