INCIDENT REPORT · CP-2026-001
University of Mississippi Medical Center ransomware attack
L3 · ELEVATEDCONFIRMED
A ransomware attack took down UMMC's IT network, including its Epic electronic health record system and phones.
- Incident ID
- CP-2026-001
- Incident date
- 19 FEB 2026
- Detection date
- 19 FEB 2026
- Affected countries
- United States
- Plotted location
- Jackson, Mississippi, United States (Affected organization headquarters)
- Threat classification
- Level 3 — ELEVATED
- Classification rationale
- Statewide closure of an academic medical center's clinics for two weeks.
- Attack type
- Ransomware
- Nature
- Malicious activity
- Attack vector
- Not publicly documented
- Sectors
- Healthcare, Education
- Critical infrastructure
- Yes
- Organizations affected
- University of Mississippi Medical Center
- Operational consequences
- UMMC closed all of its roughly three dozen clinics statewide and cancelled elective procedures for about two weeks, while hospitals and emergency departments stayed open; clinics reopened on 2 March 2026.
- Estimated financial impact
- No reliably documented figure
- Attribution (as stated)
- No official attribution recorded
SOURCE REFERENCES
- [1] Mississippi medical center closes all clinics after ransomware attackBleepingComputer · bleepingcomputer.com
- [2] University of Mississippi Medical Center reopens clinics after ransomware attackHealthcare Dive · healthcaredive.com
- [3] Mississippi health system shuts down clinics statewide after ransomware attackNPR / Houston Public Media · houstonpublicmedia.org · 21 FEB 2026
RECORD CREATED 14 NOV 2026 · LAST UPDATED 14 NOV 2026 · Threat levels are editorial assessments, not official government ratings.