---
title: "Vicksburg ransomware incident and municipal systems shutdown"
description: "Vicksburg’s October 2026 ransomware disclosure: city-system shutdown, payment delays and unresolved data-compromise questions."
incident_type: "Ransomware"
status: "active"
last_modified: "2026-10-07"
canonical_url: "https://www.ally.security/incidents/vicksburg-ransomware-2026"
markdown_url: "https://www.ally.security/incidents/vicksburg-ransomware-2026.md"
stix_url: "https://www.ally.security/incidents/vicksburg-ransomware-2026/stix.json"
---

# Vicksburg ransomware incident and municipal systems shutdown

The mayor reported a ransomware attack and city-system shutdown. Emergency services continued while data exposure remained under investigation.

Last modified Oct 7, 2026 · 1 source

## Summary

- **Environment:** Municipal computer systems
- **Operational impact:** System shutdown and possible utility-payment delays
- **Financial impact:** No quantified loss or ransom demand established

## What happened

[Vicksburg](https://www.vicksburg.org/) experienced ransomware on October 1, 2026, according to its mayor’s statement [reported by WLBT](https://www.wlbt.com/2026/10/02/city-vicksburg-hit-by-ransomware-cyberattack-mayor-says/). City computer systems were temporarily shut down. [1](#source-1)

## Impact

- The mayor said 911, police and fire services were unaffected. [1](#source-1)
- In-person utility payments could be delayed; the city said it would impose no penalties or service termination while the system was offline. [1](#source-1)
- The city had not determined whether personal or confidential information had been accessed or acquired without authorization. [1](#source-1)

## Timeline

### October 1, 2026 — Ransomware and system shutdown

The mayor dated the attack to Thursday in the [reported statement](https://www.wlbt.com/2026/10/02/city-vicksburg-hit-by-ransomware-cyberattack-mayor-says/). [1](#source-1)

### October 7, 2026 — Briefing updated

This briefing was last reviewed and updated on October 7, 2026.

## Threat Group & Attack Vector

The disclosure describes ransomware but does not establish an initial access method, named malware family or ransom demand. [1](#source-1)

### Actors

- No threat actor group is established in the retained disclosure.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

The city engaged external cybersecurity specialists to investigate and restore systems securely. The retained notice does not establish a completed recovery. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/vicksburg-ransomware-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### City of Vicksburg hit by ransomware cyberattack, mayor says

news · WLBT · Oct 2, 2026

<https://www.wlbt.com/2026/10/02/city-vicksburg-hit-by-ransomware-cyberattack-mayor-says/>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   Vicksburg ransomware incident and municipal systems shutdown: The mayor said 911, police and fire services were unaffected.
2. **Resulted In · 100% confidence · current**  
   Vicksburg ransomware incident and municipal systems shutdown: The city said it had not determined whether personal or confidential information had been accessed or acquired without authorization.
3. **Began At · 100% confidence · current**  
   Vicksburg ransomware incident and municipal systems shutdown: 2026-10-01
4. **Resulted In · 100% confidence · current**  
   Vicksburg ransomware incident and municipal systems shutdown: Vicksburg’s mayor described a ransomware attack and temporary shutdown of city computer systems.
5. **Resulted In · 100% confidence · current**  
   Vicksburg ransomware incident and municipal systems shutdown: The city engaged external cybersecurity specialists to investigate and securely restore systems.
6. **Affected Organization · 100% confidence · current**  
   Vicksburg ransomware incident and municipal systems shutdown: City of Vicksburg
7. **Resulted In · 100% confidence · current**  
   Vicksburg ransomware incident and municipal systems shutdown: In-person utility payments could be delayed; the city said there would be no penalties or termination while the system was offline.

</details>