Breaches and incidentsBriefReported by a reputable outlet, citing the company
University of Mississippi Medical Center (UMMC): ransomware closes all clinics statewide
Detected early on 19 Feb 2026. The attack hit UMMC’s network and many IT systems including its Epic EHR.
- Disclosed
What happened
- Detected early on 19 Feb 2026. The attack hit UMMC’s network and many IT systems including its Epic EHR; all IT systems were taken down as a precaution, the statewide clinics (35 per NPR/KFF reporting) closed, elective surgeries, appointments and some chemotherapy were cancelled, and staff used paper. Hospitals and emergency departments stayed open. Clinics reopened after more than a week of downtime (TechTarget).
- Root cause / initial access: not disclosed.
- Attacker: UMMC said it had contact with the ransomware group but did not name it. Secondary reports say Medusa later demanded US$800,000; not confirmed by UMMC.
- Response: FBI, DHS and CISA involved; data-theft scope not yet stated at the time of reporting.
Sources
- https://www.hipaajournal.com/ummc-ransomware-attack/
- https://www.hppr.org/npr-news/2026-02-21/mississippi-health-system-shuts-down-clinics-statewide-after-ransomware-attack
- https://www.techtarget.com/healthtechsecurity/news/366639393/UMMC-closes-clinics-amid-ransomware-attack
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.