UMMC Denied Ransom Following February Cyberattack

The University of Mississippi Medical Center systems remained offline for over a week after a February cyberattack.

Updated on Sept. 18, 2026 in Cybersecurity

UMMC Denied Ransom Following February Cyberattack

Live Poll

Should government agencies pay ransoms to cyberattackers to restore public systems?

The University of Mississippi Medical Center experienced a disruptive cyberattack on Feb. 19, 2026, which incapacitated essential IT systems. Officials later confirmed they denied a ransom demand following the incident.

Why it matters

The attack highlights the operational vulnerability of major healthcare institutions to digital extortion attempts. The situation necessitated a manual transition for staff to maintain patient care during the outage.

The cyberattack severely impacted critical infrastructure in Jackson, disabling internal phone networks, the institution's website, and core records databases for nine days.

The players

University of Mississippi Medical Center

This facility is the state's only academic medical center and a major provider of specialized healthcare in Jackson.

Shad White

As the Mississippi State Auditor, he is the government official currently conducting an investigation into the circumstances of the cyberattack.

The details

During the outage, staff at the medical center were forced to record patient information by hand to ensure continuity of care. While partner clinics were shuttered for more than a week, the facility successfully returned to full operations by Feb. 27.

Feb. 19, 2026: A cyberattack disrupted University of Mississippi Medical Center systems.
Feb. 27, 2026: The medical center returned to full operations.

The Tech Race

The breach at UMMC mirrors the security challenges faced by the Mississippi Institutions of Higher Learning during their recent separate cyberattack. This trend underscores the expanding threat landscape targeting state-run digital infrastructure.

The incident required local patients to adapt to manual record-keeping practices and potential delays in non-emergency services during the closure of clinics. Residents should remain aware that digital outages at large institutions can lead to significant logistical disruptions for routine medical appointments.

The takeaway

Institutions increasingly face pressure to choose between operational downtime and paying criminal ransoms during digital attacks. Developing robust manual contingency plans is essential for ensuring patient safety when primary IT systems are compromised.