Cyberattack Sends New Mexico’s Only Top Trauma Center Into Diversion
A cybersecurity incident forced UNM Health to divert ambulances from New Mexico's only Level 1 trauma center and cancel appointments at more than 30 clinics. The FBI is assisting.
A cyberattack forced the University of New Mexico Health System to send ambulances elsewhere on Oct. 26, leaving the state’s only Level 1 trauma center unable to take its most serious cases. Appointments at more than 30 clinics were canceled and UNM’s Health Sciences Center called off classes, the Associated Press reported via SecurityWeek. UNM says hospitals and clinics began reopening in phases later that day.
For defenders
What’s confirmed: UNM called it a cybersecurity issue and a spokesperson said it’s an active law enforcement investigation. The FBI says it’s assisting. Presbyterian Healthcare Services and Lovelace Health System took extra patients.
What isn’t: UNM hasn’t said whether this is ransomware, and no group has claimed it. Several employees told the AP that messages appeared on their computers claiming student, employee and patient data had been stolen. That’s the attacker’s claim; UNM hasn’t confirmed any data theft. The intrusion route, the systems hit and any ransom demand haven’t been disclosed. Expect a leak-site claim to follow if this is extortion, and treat it as unverified until UNM confirms.
What it means for you
If you’re a UNM Health patient, an appointment may have been canceled or moved, and in an emergency you may be taken to a different hospital for a while. If the attackers’ claim about stolen data turns out to be true, patients, students and staff could get fraud attempts that use real details, such as a fake “billing” call that knows your appointment date. UNM hasn’t said yet whether anyone’s information was taken.
Do this now
- Patients: check UNM Health’s website or call your clinic before you go in, and in an emergency call 911 rather than driving to the main hospital.
- Be wary of calls, texts or emails about UNM bills or records that ask you to pay or “verify” details. Call back on a number you look up yourself.
- Keep an eye out for an official breach notice from UNM. If one arrives, follow its instructions and consider a credit freeze.