Loading story…
Vicksburg, Mississippi, shut down city computer systems and disconnected internet operations following a reported ransomware attack, Mayor Willis Thompson said. The temporary shutdown disrupted utility-payment processing and could delay in-person payments, but emergency response and utility services continued. Residents will not face utility disconnections or late-payment penalties during the investigation.
The city is working with the FBI, Department of Homeland Security, state officials, and private cybersecurity experts to restore systems and determine whether personal or confidential information was compromised. The attackers’ identities and any ransom demands have not been disclosed, and unauthorized access to or acquisition of information remains undetermined. The incident highlights the operational impact of municipal ransomware even when essential services remain available.
See attribution, scope, and your downstream exposure.
4 events from the most recent confirmed update back to the earliest known activity.
Mayor Willis Thompson announced the incident in a statement published in a local newspaper Thursday evening, describing the shutdown as temporary. The city said residents would face neither utility disconnections nor late-payment penalties during the investigation.
Vicksburg reported working with the FBI, Department of Homeland Security, state officials, and private cybersecurity experts on recovery. Investigators were prioritizing whether personal or confidential information belonging to customers, contractors, vendors, employees, or business partners had been compromised.
The city shut down its computer systems and disconnected internet operations following the attack, disrupting utility payments. Emergency response and utility services continued.
Vicksburg, Mississippi, experienced a reported ransomware attack affecting its municipal computer systems.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
3 references tracked. Mallory keeps watching after this page renders.
therecord.media
Open sourcemalware.news
Open sourcedysruptionhub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A ransomware attack forced the University of Mississippi Medical Center to take major systems offline, disrupting its phone network, broader IT environment, and Epic electronic health record platform. UMMC closed all 35 clinics across Mississippi, canceled appointments including chemotherapy and elective procedures, and shifted staff to paper documentation while keeping hospitals and emergency departments open. The medical center said it was working with the FBI, outside cybersecurity specialists, and vendors to investigate the intrusion and restore operations. UMMC later reopened clinics as systems were gradually brought back online, but the fallout extended beyond the immediate outage. Subsequent reporting said the incident may have exposed the organization to potential federal privacy-law issues, raising questions about whether protected health information was adequately safeguarded during the attack. The case highlights how ransomware against healthcare providers can quickly disrupt patient care, delay treatment, and create regulatory risk alongside operational recovery.
Jun 29, 2026
The **University of Mississippi Medical Center (UMMC)** reported a **ransomware attack** that knocked multiple IT systems offline, including access to its *Epic* electronic health record (EHR) platform, triggering the organization’s emergency operations plan. The disruption forced UMMC to **close all 35 clinics statewide** and **cancel outpatient, elective, and clinic procedures**, while hospital and emergency services remained open under contingency operations. UMMC stated the attackers have been in communication and that it is working with external specialists and law enforcement; the **FBI is investigating** and warned the duration of the outage was unknown at the time of reporting. Separate reporting also described a different municipal incident in **Meriden, Connecticut**, where officials took city internet services and public Wi‑Fi offline after an attempted disruption; emergency services were reported as unaffected and the city said it would conduct a comprehensive review before restoring service.
Jun 29, 2026
The City of Coweta, Oklahoma said a ransomware attack caused a system-wide outage across city computers, files, and computer-based services, disrupting municipal operations while leaving the city website and a third-party online billing portal accessible. Officials said the intrusion affected city systems broadly, prompting an immediate response with the city's contracted IT provider and additional cybersecurity professionals to secure the environment, contain further intrusion, and begin recovery efforts. City officials said the Coweta Police Department and Fire Department were not affected because they operate through off-site systems, and emergency services including **911** remained operational throughout the incident. The city also said it has an **offsite backup** and plans to use it to restore data once systems are cleared and deemed safe for recovery.
Aug 10, 2026