Cybersecurity Incident Forces New Mexico Hospital to Divert Patients and Close Clinics
Summary
A cybersecurity incident disrupted the University of New Mexico Health System, forcing ambulance diversions and clinic cancellations. Employees reported seeing messages claiming data was stolen; the incident’s nature remains unclear and operations resumed in phases.
Key points
- The University of New Mexico Health System told patients not to go to its main Albuquerque hospital and canceled appointments at more than 30 clinics.
- Ambulances were diverted, and other New Mexico health systems took additional patients; UNM operates the state’s only Level 1 trauma center.
- Employees said computer messages claimed student, employee and patient data had been stolen; this claim was not confirmed.
- The health system said the incident was under active law-enforcement investigation. The FBI said it was assisting but gave no further details.
- Hospitals and clinics began resuming operations in phases later that day.
Article Details
- Victim Organization
- University of New Mexico Health System
- Incident Type
- Cybersecurity incident; the nature and extent were unclear. Messages on employee computers claimed data had been stolen.
- Data Types Exposed
- Student data (claimed stolen)
- Employee data (claimed stolen)
- Patient information (claimed stolen)
- Operational Impact
- Ambulances were diverted to other hospitals, appointments at more than 30 clinics were canceled, the main hospital told people not to arrive, and classes at the Health Sciences Center were canceled. Hospitals and clinics began resuming operations in phases later that day.
- Ransom Or Extortion
- No ransom demand or extortion activity was reported. Messages on employee computers claimed data had been stolen.
- Claim Status
- claimed