On June 4, a fraudulent email was dispatched from the city of Vallejo's official email address, prompting an investigation by the city's Information Technology Department. The email, titled “something awaits,” was sent around 4 p.m. and posed as a communication from Tiffany and Co., trying to lure recipients into clicking a link.
City officials confirmed the incident on June 5, labeling it a “malicious hacking incident.” They assured the public that there is currently no evidence indicating a risk to personal data or a compromise of information held within the email management platform, Constant Contact. Residents who received the email were advised to delete it without taking further action.
This event follows a previous data breach in May 2016, when Vallejo unintentionally released employees' social security numbers in response to a public records request. In that case, the city later arranged for identity protection services for the affected individuals.