City of Foster City Notifies Residents of Network Intrusion Involving Personal Data

What the notice says

City of Foster City filed a notice with the California Attorney General, reported 2026-10-15, telling recipients that personal information may have been exposed after suspicious activity was found on its network. The notice as filed states that an unauthorized third party accessed certain City systems and may have viewed or acquired files during a specific window.

After the discovery, City of Foster City says it secured its systems, involved law enforcement, and brought in an outside forensic firm to investigate. A later review identified which individuals had personal information in the affected files.

The specific categories of personal data involved are represented in the notice template by placeholder fields rather than spelled out in the text supplied. City of Foster City states it has no indication the information has been misused.

The City is offering a one-year complimentary Experian IdentityWorks Credit 3B membership to those notified.

What the notice leaves open

The notice as filed does not state the exact date City of Foster City first identified the suspicious activity, only describing it as earlier in the year. It also does not specify how many people were notified in total, and the specific data elements involved were not disclosed in the text provided. The notice does confirm one procedural detail.