Mississippi Lawmakers Seek Answers on UMMC and IHL Cyberattacks

Mississippi’s State Auditor is asking for details of two cyberattacks on the state’s public higher-education system, and a state senator says no state tax money was used to pay a ransom, according to the Magnolia Tribune.

What happened

In February 2026, a network breach at the University of Mississippi Medical Center (UMMC) caused system outages and clinic closures, though patient care in its hospitals and emergency departments continued. On 7 September 2026, the office of Mississippi’s Institutions of Higher Learning (IHL) was hit by a cyberattack that affected its Office of Financial Aid; individual institutions were notified on 10 September.

What officials have said

State Senator Nicole Boyd said: “There was no ransom paid using any state tax dollars or anything like that.” State Auditor Shad White has written to IHL Commissioner Dr. Al Rankins asking for the dates of the breaches, when the state’s IT department was notified, the scope of the attacks, information about any ransom, and remediation plans, with a 14-day deadline from 22 September.

What isn’t public yet: the total cost of the incidents, whether any ransom was paid from other funds, and what data, if any, was exposed.

Why it matters beyond Mississippi

Universities and hospitals run large, open networks with many internet-facing systems, which makes them frequent targets. If you run a public-sector or education network, check that remote-access services aren’t exposed with a port scan, and that your mail servers aren’t on spam blocklists, a common sign of compromised machines.