City of Fort Smith Arkansas targeted by Interlock ransomware group

• Ransomware group: Interlock
• Country: United States
• Sector: Government & Defense
• Announcement date: September 15, 2026

Interlock claims massive data breach at City of Fort Smith Arkansas

The threat actor known as Interlock has announced a significant data breach targeting the City of Fort Smith Arkansas. According to an announcement made on a ransomware leak site on September 15, 2026, the group claims to have compromised systems belonging to the municipality and exfiltrated a vast amount of sensitive information. The total volume of the alleged stolen data is reported to be 5.6 TB.

This type of incident often follows the pattern of double extortion, a tactic where ransomware actors not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage. By threatening to leak the stolen information on public forums or leak sites, attackers aim to pressure the victim into paying a ransom to prevent the disclosure of confidential records.

Details of the alleged attack and data exfiltration

The Interlock group stated that the compromise occurred on September 15, 2026. In their announcement, the threat actors claim to have gained unauthorized access to the city's infrastructure and successfully exfiltrated sensitive data related to various municipal functions. The group specifically alleges that they have obtained information regarding public safety, water treatment facilities, and municipal information systems.

The scope of the alleged theft is extensive, involving critical records that could impact both the administration and the residents of the city. The group claims to possess highly sensitive documentation, including 911 emergency dispatch records, law enforcement files, and various forms of personally identifiable information. The specific types of data mentioned in the claim include:

• Social Security Numbers (SSN)
• Personally identifiable information (PII)
• Police and crime records
• 911 call logs
• Water supply infrastructure data

Beyond these categories, the group claims to have acquired over 100,000 Social Security Numbers (SSNs), police reports, driver's license information, and 911 call logs. Additionally, the claim includes the theft of water supply system management data and dumps of software utilized by law enforcement agencies.

About the City of Fort Smith Arkansas

Fort Smith is a city government located in the state of Arkansas. The city provides essential municipal services to the local population, including public administration, safety, and water and sewer management.

Implications of the breach and security considerations

This alleged breach highlights the potential consequences of security vulnerabilities within local government units, particularly concerning critical infrastructure and citizen data. The nature of the data claimed to be leaked could significantly increase the risk of identity theft for the residents of Fort Smith. Furthermore, the exposure of sensitive law enforcement information may jeopardize ongoing security operations.

The exposure of critical infrastructure data, such as water supply systems, is particularly concerning as it may create a foundation for secondary attacks against the municipality. When critical services like water and sewer management are targeted, the impact can extend beyond data privacy to physical public safety concerns.

In accordance with US state laws and federal regulations, the institution may be required to fulfill data breach notification obligations and initiate support processes for affected individuals. For organizations in the government and defense sector, such incidents underscore the necessity of robust cybersecurity frameworks. Common defensive steps for such entities include implementing multi-factor authentication, maintaining offline backups, and ensuring rigorous patch management for all municipal and infrastructure-related software. While the public information regarding the Interlock group remains limited, the scale of this alleged attack serves as a reminder of the risks faced by local government administrations.