Vicksburg ransomware incident and municipal systems shutdown

The mayor reported a ransomware attack and city-system shutdown. Emergency services continued while data exposure remained under investigation.

Last modified

Summary

  • Environment: Municipal computer systems
  • Operational impact: System shutdown and possible utility-payment delays
  • Financial impact: No quantified loss or ransom demand established
  • Record status: Developing record. Reviewed October 7, 2026; updated as evidence emerges.

What happened

Vicksburg experienced ransomware on October 1, 2026, according to its mayor’s statement reported by WLBT. City computer systems were temporarily shut down. [1]

Impact

  • The mayor said 911, police and fire services were unaffected. [1]
  • In-person utility payments could be delayed; the city said it would impose no penalties or service termination while the system was offline. [1]
  • The city had not determined whether personal or confidential information had been accessed or acquired without authorization. [1]

Timeline

  1. Ransomware and system shutdown

    The mayor dated the attack to Thursday in the reported statement.

    [1]
  2. Briefing updated

    This briefing was last reviewed and updated on October 7, 2026.

Threat Group & Attack Vector

The disclosure describes ransomware but does not establish an initial access method, named malware family or ransom demand. [1]

Actors

  • No threat actor group is established in the retained disclosure.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

The city engaged external cybersecurity specialists to investigate and restore systems securely. The retained notice does not establish a completed recovery. [1]