City of Fort St. John (city.cityfsj.local) Listed by INC Ransom Ransomware Group

On February 25, 2025, the City of Fort St. John appeared on the leak site of the ransomware group Incransom. The Canadian municipality, home to roughly 21,000 residents in northeastern British Columbia, is claimed to have had internal files exfiltrated during a ransomware attack.

What Public Reporting Shows

Public reporting indicates that Incransom listed the city’s internal domain city.cityfsj.local and claimed to have stolen files. The exact number of affected residents remains unknown, and the precise volume or sensitivity of the data has not been disclosed by either the city or the attackers. Available reporting describes the incident as a classic ransomware operation involving both encryption and data exfiltration, with the group threatening to publish the stolen material if demands are not met.

The breach follows a pattern now familiar to small and mid-sized municipalities: attackers gain initial access, move laterally, exfiltrate documents, and then encrypt systems. No official statement from the City of Fort St. John had been widely circulated at the time of the leak-site posting.

Why This Matters for You and Your Family

When a local government’s internal files are stolen, the information often includes details that touch ordinary residents. Tax records, utility accounts, licensing information, employment data for city staff, and correspondence containing personal identifiers can all end up in attackers’ hands. If your name, address, phone number, or email appears in any of those files, the exposure creates long-term risk.