UMMC confirms ransomware attack forcing clinics to close - The Clarion-Ledger

NEWS UMMC confirms ransomware attack forcing clinics to close Pam Dankins Mississippi Clarion Ledger Updated Feb. 19, 2026, 1:33 p.m. CT The University of Mississippi Medical Center confirmed it was hit by a ransomware attack, disrupting its IT network. Hospital officials and federal law enforcement are in communication with the attackers. UMMC shut down its IT systems, closed 35 clinics, and canceled outpatient appointments as a precaution. It is currently unknown if patient or credit card information was compromised during the breach. The FBI and other federal agencies are investigating the cyberattack to determine its full extent. The University of Mississippi Medical Center confirmed that hospital officials and federal law enforcement are in communication with the attackers behind a cyberattack on Thursday, Feb. 19, which disrupted multiple systems within the medical center. Vice Chancellor for Health Affairs LouAnn Woodward revealed during a Thursday press conference, that UMMC sustained a cyberattack in the early hours of the morning that impacted its IT network and key systems, including Epic, the medical center's electronic medical record platform. Woodward said in response, the hospital took precautionary steps of shutting down all of its IT systems. Woodward confirmed the incident was a ransomware attack but provided no further details about the nature of the attack or the ongoing discussions between the attackers and authorities. Woodward said that UMMC is uncertain about "how long this situation may last," adding that it remains unclear whether credit card or patient information was compromised. Officials said it is still too early to determine the full extent of the breach. "There are a lot of questions that I have, that we all have, that you have, that we don't know the exact answers to at this point. There's a lot we don't know," Woodward said. "The assessment is still underway, but this is the status as it stands right now." Woodward said the medical center "triggered" its emergency operations plan, which led to all 35 of UMMC clinics throughout the state to close Thursday. Administrative functions, such as billing and the hospital's websites are also affected. UMMC's phone system is also compromised, with many hospital and clinical numbers unable to take calls. Woodward said all outpatient, ambulatory surgeries and imaging appointments are canceled and will be rescheduled. Hospital and emergency services are still active but are under "downtime procedures." "We have hundreds of patients in our critical care unit; their vital signs are still being monitored (and) the bedside equipment is working. It's just not connecting into the EPIC program. We are on a manual process right now," Woodward said. "Some of us in the room have been here long enough that we remember taking care of patients with pen and paper." FBI investigating cyberattack The FBI, U.S. Department of Homeland Security and U.S. Cybersecurity and Infrastructure Security Agency are involved in the investigation. FBI Special Agent in Charge in Mississippi Robert Eikhoff said the agency's priority is helping the medical center restore its systems and continue providing services to its patients. "We are in the process of surging resources, both locally and nationally, into this incident to make sure that we are standing alongside with UMMC and their vendors as we look to understand the extent of this attack," Eikhoff said. UMMC's MedCom emergency communications system remains operational through resources designed to function independently during emergencies. In-person classes for students will continue as scheduled. Hospital officials said additional information will be released as it becomes available. Pam Dankins is the breaking news reporter for the Clarion Ledger. Have a tip? Email her at pdankins@gannett.com. Featured Weekly Ad