The University of Mississippi Medical Center (UMMC) experienced a ransomware attack on February 19, 2026. This attack led to the closure of all 35 UMMC clinics statewide and disrupted operations for nine days, taking the Epic electronic health record (EHR) system offline and restricting access to communication systems. UMMC confirmed working with federal authorities including the FBI and CISA.
While the specific number of affected individuals has not been publicly disclosed, UMMC serves over 70,000 patients annually. No specific details on compromised data types have been released in official statements, but the breach potentially exposed electronic health records and related patient information given the impact on the EHR system. The extent of data exfiltration remains unclear.
Details regarding breach notification letters to affected individuals and specific states impacted are not yet public, though the incident affected operations throughout Mississippi. Attorneys are actively investigating the potential for a class action lawsuit.