California city reports ransomware attack as LA transit agency finds ‘unauthorized activity’

Foster City, California, recently disclosed a ransomware attack impacting its municipal systems. The incident, reported on March 20, 2026, by The Record Cyber¹, possibly led to the compromise of public information. Consequently, the city advised individuals who have engaged with its services to enhance their personal security by changing passwords and implementing data protection measures. Concurrently, the Los Angeles Metropolitan Transportation Authority (LA Metro) identified "unauthorized activity" within its network infrastructure. While specific details regarding the nature or extent of LA Metro's breach remain less clear in initial reports, the co-occurrence of these events underscores a heightened threat environment. These distinct but proximate cyber incidents targeting critical public services in California signal the ongoing and diverse challenges facing state and local government entities. Practitioners must prioritize agile incident response frameworks and continuous security posture assessments to mitigate the increasing risk of operational disruption and data exfiltration.