← Back to News Feed
Incident Report

Cyber Attack Hits UMMC: Patient Data Systems Compromised in Major Security Breach

Published on February 21, 2026 • By Mississippi Lead News Desk • 8 min read
UMMC Cybersecurity Breach

JACKSON, MS — The University of Mississippi Medical Center (UMMC) has officially entered a state of emergency following a sophisticated ransomware attack that has crippled its digital infrastructure. The breach, which was detected in the early hours of Monday morning, has forced the state’s largest healthcare provider to disconnect several primary servers to contain the spread of the malicious encryption.

NOTICE TO PATIENTS: All elective procedures at the Jackson campus are currently being rescheduled. If you have an appointment, please wait for a manual call from our staff or use the temporary emergency hotline.

The Scope of the Digital Lockdown

While critical life-support systems and bedside monitoring in the Intensive Care Units (ICU) remain unaffected due to their isolated networks, the administrative and diagnostic layers of the hospital are in "digital gridlock." Doctors at the Conerly Critical Care Hospital and the Wiser Hospital for Women and Children are currently relying on paper charts and manual prescriptions—a process not seen at this scale since the early 2000s.

Ransomware and Data Integrity

Sources close to the investigation suggest that the attackers utilized a high-level "Zero-Day" exploit to bypass the initial firewalls of the Guyton Research Complex data center. While UMMC officials have not confirmed a specific ransom amount, cybersecurity analysts in Madison and Hinds County warn that the primary concern is the potential exfiltration of sensitive patient records, including social security numbers and medical histories.

The FBI’s Cyber Division has joined forces with the Mississippi Department of Information Technology Services to conduct a full forensic audit. "We are working around the clock to determine the depth of the intrusion," said an agency spokesperson during a press briefing near the Jackson Business District.

Regional Impact: Flowood and Beyond

The ripple effects are being felt across Central Mississippi. Regional clinics in Flowood, Brandon, and Clinton that share the UMMC network have also moved to offline operations. This has caused a significant surge in patient volume at alternative facilities as residents seek care for non-emergency conditions elsewhere.

Moving Forward: Recovery Efforts

Recovery is expected to take weeks. UMMC is currently in the process of restoring systems from offline backups, a meticulous task that requires ensuring every server is clean of the "BlackByte" variant identified in the initial attack. Residents are urged to be vigilant against phishing attempts and to monitor their credit reports if they have received treatment at the Jackson campus within the last 12 months.