The City of Foster City, California suffered a ransomware attack that suspended non-emergency municipal services while emergency operations continued, with investigations ongoing to determine whether resident data was exfiltrated. City officials considered declaring a state of emergency to access financial recovery resources, signaling the operational and fiscal severity ransomware imposes on local governments. This incident reinforces a well-documented pattern: under-resourced municipal IT environments remain high-value targets for ransomware operators, and the downstream impact on public services carries consequences that extend well beyond IT recovery timelines.