Cyberattack at UMMC Disrupts Healthcare Operations

Incident highlights growing cost and risk of data breaches in the medical industry

Published on Feb. 21, 2026

Got story updates? Submit your updates here. ›

A recent cyberattack on the University of Mississippi Medical Center (UMMC) has caused significant disruption to the hospital's operations, including the cancellation of patient appointments and the offline status of its MyChart system. The incident underscores the broader trend of increasing healthcare cyber threats, with U.S. providers reporting hundreds of ransomware attacks and data breaches affecting millions of patient records in 2025.

Why it matters

Cyberattacks on healthcare facilities can have severe financial and operational consequences, with the average cost of a data breach in the industry reaching $10.22 million per incident. Downtime alone can cost hospitals up to $3.2 million per hour, while also delaying care delivery, interrupting scheduling, and disrupting critical systems.

The details

The cyberattack at UMMC has forced the cancellation of patient appointments and left the hospital's MyChart system offline. While UMMC has not disclosed the financial impact or the expected timeline for restoration, industry data shows that healthcare cyberattacks can take weeks or longer to resolve and often result in significant losses.

  • In 2025, U.S. healthcare providers reported hundreds of ransomware attacks and 364 or more hacking incidents affecting millions of patient records.

The players

University of Mississippi Medical Center (UMMC)

A major academic medical center and the state's only Level I trauma center, located in Jackson, Mississippi.

Got photos? Submit your photos here. ›

The takeaway

The UMMC cyberattack highlights the growing threat of data breaches in the healthcare industry, which can have devastating financial and operational consequences for medical facilities. As cybersecurity risks continue to escalate, hospitals and healthcare providers must prioritize robust cybersecurity measures to protect patient data and ensure the continuity of critical medical services.