Fort Smith Arkansas Ransomware Claim by Interlock (Sep 2026)

Claim Summary

The City of Fort Smith, Arkansas (fortsmithar.gov) has allegedly been listed as a victim by the interlock ransomware group. According to the threat actor’s leak site post, dated September 15, 2026, the city purportedly suffered a “major leak” of approximately 5.6 TB of data. The group claims the compromised material includes information tied to public safety systems, water infrastructure, and municipal information systems.

Importantly, this is an unverified claim published on a criminal leak site. The City of Fort Smith has not been confirmed to have acknowledged or validated this incident. Ransomware operators frequently publish inflated or misleading claims to pressure victims into paying.

Threat Actor Profile

interlock is a ransomware operation that emerged publicly in late 2024. The group is generally assessed to operate using a double extortion model, exfiltrating data before deploying encryption and threatening publication to coerce payment.

Public research on interlock remains limited. There is no widely available, authoritative tooling profile for this group, and no confirmed YARA rules or detection signatures are published in the sources reviewed for this report. Defenders should treat the group’s toolset as unknown and rely on general ransomware detection guidance: monitoring for unusual data staging, large outbound transfers, and unauthorized access to backup infrastructure. Organizations should also review endpoint telemetry for living-off-the-land techniques commonly used across ransomware families.

Given the absence of a documented track record, the credibility of this specific claim cannot be strongly established. The group’s history of verified victims is not publicly catalogued in the data provided.

Alleged Data Exposure

The leak site post makes sweeping claims. According to the threat actor, the exposed data purportedly includes:

• Public safety systems: police station, fire department, and the communications center handling 911 emergency dispatch
• Water and sewer treatment plant systems
• Municipal computer systems and networks
• Law enforcement data, allegedly including references to the Arkansas Crime Information Center and FBI Criminal Justice Information Service
• Over 100,000 Social Security numbers, per the group’s claim
• Police reports, incident photos, and phone-related data

These are extraordinary claims. Ransomware groups routinely exaggerate scope, inflate record counts, and bundle unrelated or fabricated material to increase leverage. The assertion that federal and state law enforcement systems were accessed should be treated with particular skepticism until independently corroborated.

Potential Impact

If even partially accurate, a breach of this scale against a municipality could affect emergency dispatch continuity, expose resident PII, and disrupt water utility operations. Municipalities are attractive targets because downtime directly impacts public services and creates urgency to pay.

However, no evidence has been provided to Yazoul Security to confirm any of these claims. The actual scope, if any, remains unknown.

What to Watch For

• Official statements from the City of Fort Smith or Arkansas state authorities
• Any notification from federal agencies regarding law enforcement data systems
• Breach notification letters to residents if PII exposure is confirmed
• Independent forensic reporting on the incident’s true scope

Disclaimer

This report is based solely on an unverified claim published by a ransomware group on its leak site. Yazoul Security has NOT independently verified this incident, the data volume, or the nature of any exposed information. Nothing here should be treated as confirmation of a breach. Ransomware actors frequently make false or exaggerated claims. Readers should await official confirmation from the City of Fort Smith or relevant authorities before drawing conclusions.