Anthony, New Mexico, Investigates Cybersecurity Incident After Records Go Missing

Summary
Anthony officials report missing records, inaccessible systems, wiped devices and emails forwarded externally after an administrative transition. Authorities are reviewing the matter; no external hack, malware, ransomware or data theft has been confirmed.
Key points
- The city says it discovered missing public records, inaccessible systems and wiped police department devices after a change in administration.
- Local reporting says devices assigned to former officials were not returned, and some city email accounts had forwarded information externally.
- The city says missing investigative files, operational documents and grant-related materials have complicated records access and daily operations.
- Anthony is working with the New Mexico Attorney General’s Office and the Third Judicial District Attorney’s Office; the attorney general’s office says it assigned an attorney to review the matter.
- The publicly described facts do not confirm an external hack, ransomware, malware, data theft or a named threat actor.
- The city is seeking to recover records, restore access and determine whether information was improperly deleted, removed or shared.
Article Details
- Victim Organization
- City of Anthony
- Incident Type
- Reported records and systems integrity and availability incident following an administrative transition; an external hack has not been confirmed.
- Disclosure Date
- 2026-04-11
- Affected Records
- Not disclosed. The city reported missing public records, including investigative files, operational documents, and grant-related materials; exposure or theft was not confirmed.
- Operational Impact
- The city reported inaccessible systems, devices assigned to former officials that were not returned and later disappeared from city systems, and police department devices described as locked and wiped. Missing or affected records have strained responses to public-records requests and city administration. The extent and cause of the disruption remain under review.
- Ransom Or Extortion
- No ransom or extortion was reported. The cited public statements did not confirm ransomware.
- Claim Status
- alleged
