Hackers Demand Ransom from University of Mississippi Medical Center

Ransomware group targets major healthcare system after cyberattack

Published on Feb. 25, 2026

Got story updates? Submit your updates here. ›

A ransomware group has demanded money from the University of Mississippi Medical Center (UMMC) following a cyberattack on February 19. The health system has taken some IT systems offline, closed outpatient clinics, and canceled elective procedures as it works to contain the incident and determine what data may have been affected.

Why it matters

Cyberattacks on healthcare systems can have serious consequences, disrupting critical patient care and potentially exposing sensitive medical data. This incident highlights the ongoing threat of ransomware attacks targeting the healthcare industry, which has seen a rise in such incidents in recent years.

The details

After the February 19 hack, UMMC took steps to contain the incident, including taking some IT systems offline, closing 35 outpatient clinics, and canceling elective procedures. The health system is not disclosing whether it is negotiating with the hackers, but a UMMC leader confirmed the attackers left ransom demands. UMMC is working to determine what data was affected, with particular concern over the potential impact on its electronic health record system.

  • The cyberattack occurred on February 19, 2026.
  • UMMC provided an update on the situation on February 24, 2026.
  • As of February 25, 2026, UMMC said it was making progress in restoring systems, but clinic appointments and elective procedures remained canceled through February 27.

The players

University of Mississippi Medical Center (UMMC)

A major academic health system and Level 1 trauma center based in Jackson, Mississippi.

LouAnn Woodward, MD

Vice chancellor for health affairs at UMMC.

Got photos? Submit your photos here. ›

What they’re saying

“They did leave demands, and again and sadly, everyone wants to know [how much]. But that's part of what we're not sharing with the public.”

— LouAnn Woodward, MD, Vice chancellor for health affairs (SuperTalk Mississippi)

“Our electronic health record was one of the components that we know was impacted by the attack. What we are trying to learn is what has been encrypted, what has been exported or exfiltrated. So that's some of the effort that is going on now and has been going on since last Thursday. That takes time to test and validate.”

— LouAnn Woodward, MD, Vice chancellor for health affairs (SuperTalk Mississippi)

What’s next

UMMC is continuing to work on restoring its systems and determining the full extent of the data breach, with a focus on protecting patient information. The health system has not indicated if it plans to pay the ransom demand.

The takeaway

This ransomware attack on a major healthcare provider underscores the growing threat of cybercrime targeting the medical industry, which holds vast amounts of sensitive personal and financial data. The incident highlights the need for robust cybersecurity measures and incident response plans to protect critical healthcare infrastructure and patient care.