Ransomware attack forces Vicksburg, Mississippi to shut down city computer systems

The city of Vicksburg, Mississippi has temporarily shut down its computer systems after a ransomware attack, Mayor Willis Thompson said in a public statement. According to local broadcaster WLBT, the attack hit city systems on Thursday, October 1, and The Record reported on October 2 that the mayor announced the incident through a statement published in the local newspaper. The city, home to more than 20,000 people and located about 40 minutes west of Jackson, is the latest Mississippi public body to be disrupted by ransomware.

What happened

Thompson confirmed that the city is investigating a cybersecurity incident stemming from a ransomware attack that forced officials to take computer systems offline. According to SuperTalk Mississippi, the mayor said the city "has implemented its incident response protocols and is working with external cybersecurity specialists" to investigate and restore systems securely.

The Record reported that the city is collaborating with the FBI, the Department of Homeland Security, state officials and private cybersecurity experts on recovery. Officials declined to share technical details, information on any ransom demand or the identity of the attackers, saying they did not want to interfere with recovery efforts. As of publication, no ransomware group had publicly claimed the attack, and the sources did not identify the strain involved.

Who is affected

According to WLBT, emergency services such as 911, the police department and the fire department were not affected and continued to operate normally. The outage did, however, hit utility payment processing. SuperTalk Mississippi reported that online utility payment services and other unspecified government functions were offline, and residents paying utility bills in person were told to expect delays.

To limit the impact on residents, Thompson said that "no one's services will be shut off while the investigation is ongoing and no penalties will be issued for late payments," according to The Record.

The bigger open question is whether data was stolen. The mayor said one of the investigation's top priorities is determining whether personal or confidential information relating to current or former customers, contractors, vendors, employees or affiliated business partners of the city was compromised. WLBT and SuperTalk Mississippi reported that no final determination had been made, and the city said affected parties would be notified and offered protective resources if a compromise is confirmed.

Technical details

The city has not disclosed how attackers gained access, which systems were encrypted or how long the recovery is expected to take. Officials said they would provide public updates as information becomes available but would withhold specific investigative details to protect against future attacks, SuperTalk Mississippi reported.

The Record noted that Mississippi has recently dealt with several other significant ransomware incidents, including attacks on the University of Mississippi Medical Center, an electricity utility and a county government.

What to do

Vicksburg residents should follow official city channels for updates on payment options and service restoration, and be cautious of unsolicited calls, emails or texts that claim to be from the city or request payment details, since attackers and scammers often exploit such incidents. Anyone who has done business with the city should watch for a formal breach notification if the investigation confirms that data was accessed. For other municipalities, the incident is a reminder to maintain tested offline backups, segment critical systems such as emergency services from administrative networks, and keep a rehearsed incident response plan that includes alternative ways for residents to pay bills.