University of Mississippi Medical Center said a cybersecurity attack knocked multiple IT systems offline Thursday, cutting off access to its Epic electronic medical records platform and prompting the Jackson-based system to close clinics and cancel outpatient care.
In a Feb. 19 social media post, UMMC said it was responding to a “cybersecurity attack” that left “many” IT systems down, including Epic.

WLBT reported that employees described an early-morning cyberattack that “compromised all IT systems,” with some staff sent home, and that the medical records system was down.
UMMC has not disclosed the nature of the attack or who was responsible. No ransomware group has publicly claimed the incident, and the hospital did not immediately respond to DysruptionHub’s request for comment.
UMMC said all clinic locations statewide were closed for the day. Outpatient and ambulatory surgeries and procedures, as well as imaging appointments, were canceled and will be rescheduled. Hospital services were continuing using downtime procedures, the medical center said.
WLBT also reported that UMMC’s website appeared inaccessible for a period Thursday morning and that a recorded message on the main phone line cited “system problems.”
UMMC did not provide a timeline for restoring systems. WLBT said the hospital had not responded to the station’s request for comment at the time of publication.
Mississippi providers have faced repeated cyber-related disruptions. In December 2025, Singing River Health System said it shut down select systems, including internet access, to assess a “potential cyber incident,” briefly disrupting its MyChart portal before restoring access later that day. Singing River has also said it suffered a “malicious and sophisticated ransomware attack” in August 2023 and previously shut down its network during an attempted intrusion in 2018.
UMMC is based in Jackson and operates clinics statewide, serving as Mississippi’s only academic medical center and a key referral hub for complex care across the state.
Hospitals hit by cyber incidents typically work to determine whether systems were taken offline for containment or whether data was accessed, and may coordinate with law enforcement and regulators depending on what investigators find.