Security1 publisher2 min readPublished
Ransomware attack disrupts utility payments in Vicksburg, Mississippi
Vicksburg Mayor Willis Thompson says ransomware forced a shutdown of city systems that hit utility payments in the Mississippi city of more than 20,000. The city, still investigating, has not determined whether personal data on customers, employees or vendors was accessed.
The Watch · Security desk
What happened
- Emergency services have not been affected by the attack, Thompson said.
- No resident's services will be shut off and no late-payment penalties will be issued while the investigation continues, Thompson said.
- Thompson told the Vicksburg Post that the FBI, the Department of Homeland Security, state officials and private cybersecurity experts are working on recovery with the city.
- The city did not respond to The Record's questions about ransom demands or the identity of the attackers.
- The University of Mississippi Medical Center spent weeks in the dark after its own ransomware attack and needed FBI assistance to recover.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- exposure Former customers and former employees are inside the data inquiry, so people who no longer hold a Vicksburg account or city job may still turn out to be affected.
- cost Pausing shutoffs and late fees puts the cost of delayed collections on the city for as long as the investigation runs, and spares residents penalties for an outage they did not cause.
- constraint With no attacker named and no ransom demand disclosed, other Mississippi agencies cannot check this intrusion against a known group's methods.
Thompson called the shutdown "temporary" in the statement he published in the local newspaper on Thursday evening [1][2][4]. The same statement set out the data question. "One of the top priorities of our investigation is determining whether there was any compromise of personal or confidential information relating to current and/or former customers, contractors, vendors, employees, or affiliated business partners of the City," Thompson said [7].
On where the inquiry stands, he said: "At this time, the investigation is ongoing, and the City has not reached a final determination regarding what information, if any, may have been accessed or acquired without authorization" [8]. Until that determination comes, no resident has been told their data was taken [8].
The city will not release technical information "that could interfere with the investigation, recovery efforts, or the security of City systems," according to Thompson's statement [10]. Without it, the public record does not show which systems the attackers reached. It also does not show whether the utility payment platform runs on the same infrastructure as the customer and employee records now under review [3][7][10].
Vicksburg sits about 40 minutes west of Jackson [11]. It is the fourth Mississippi ransomware target cited in The Record's report [1]. Ransomware gangs hit a county in 2023 and a prominent electricity utility last year [14]. The University of Mississippi Medical Center, the state's largest and most important healthcare organization, was hit recently [12].
That is a county, a utility, a hospital system and a city. On the published record, what links the four is geography [1][14].
What to watch
- The city's final determination on whether personal or confidential information was accessed or acquired, and whose records it covers.
- A named group or public claim of responsibility for Vicksburg; either would test whether the four Mississippi incidents share an actor.
- Restoration of utility payment systems and the date the city ends its pause on shutoffs and late fees.