Vicksburg, Mississippi shuts down city systems after ransomware

The city of Vicksburg, Mississippi took its computer systems offline on October 2 in response to a ransomware incident, Mayor Willis Thompson said in a public statement. Emergency services were not affected; utility payment processing is down. Coverage: Recorded Future News, the city's own release via Vicksburg News, and local WLBT.

What's affected

Per the mayor's statement, the system shutdown is described as temporary and was a containment measure. The disruption reaches resident-facing services — notably utility payments — while emergency services continue to operate. Thompson said no one's utility service will be cut off during the investigation and no late penalties will be issued while systems are down.

Status

The city is working the incident alongside the FBI, the Department of Homeland Security, other state officials, and private cybersecurity responders. A stated priority is determining whether any personal or confidential information was accessed; the city says that determination has not been reached. No ransomware group has claimed responsibility, and the city has not named a strain or an actor — treat any attribution circulating elsewhere as unconfirmed.

Action checklist

For municipal and other small-government IT teams reading this as the next-in-line:

1. Confirm you have offline, tested backups of the systems that run resident services (utility billing, permitting, court records) — the pressure point in these attacks is exactly the citizen-facing workload.
2. Segment payment and billing systems from general office IT so a shutdown of one doesn't take down the other.
3. Pre-stage a continuity plan for paper/alternate intake so a "temporary shutdown" doesn't become a weeks-long service outage.
4. Have the FBI field-office and state-fusion-center contacts on file before the incident — the cities that recover fastest called early.
5. Rotate credentials and review remote-access paths now; opportunistic ransomware against local government leans on exposed VPNs and reused admin passwords.

Context

Small US cities and counties remain a steady ransomware target: thin IT staffing, essential citizen services that create payment pressure, and budgets that rarely fund segmentation or 24/7 monitoring. Vicksburg's early, specific public communication — what's down, what's safe, who's helping — is the part other municipalities should copy. The quieter the city, the longer the recovery, because silence usually means there was no plan to begin with.