Summary
- Environment: Medical-center computer network
- Operational impact: Personal and protected health information potentially accessed or acquired
- Financial impact: No incident cost disclosed
- Record status: Developing record. Reviewed November 4, 2026; updated as evidence emerges.
What happened
The University of Mississippi Medical Center identified unauthorized network access around February 19, 2026. [1]
Impact
On October 20, UMMC concluded that files containing personal or protected health information may have been accessed or acquired between February 11 and February 19. [1]
The public notification template specifies names but leaves recipient-specific data categories blank. It does not establish the complete set of exposed fields or a total affected population. [1]
Timeline
Reported access window begins
Reported access window begins, according to the published account. Incident notice.
[1]Reported access window ends
Reported access window ends, according to the published account. Incident notice.
[1]Potential data impact identified
Potential data impact identified, according to the published account. Incident notice.
[1]Briefing updated
This briefing was last reviewed and updated on November 4, 2026.
Threat Group & Attack Vector
The reviewed notice does not establish the initial access method.
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
UMMC secured its systems, worked with outside cybersecurity specialists and offered identity monitoring. It reported no evidence of financial fraud or identity theft involving the information at notification. [1]