Patient care was disrupted after a cyberattack affected the University of New Mexico Health Sciences Center and its hospitals and clinics. Ambulances were diverted for a time, outpatient surgeries and appointments were suspended, and medical classes were cancelled. A ransomware group claimed responsibility and alleged broad data theft, but the university had not confirmed those claims. Classes later resumed and clinical operations were reported as fully functional.
Why It Matters
Healthcare incidents can become safety and continuity events before the scope of any data loss is known. For leaders: recovery plans must account for patient diversion, cancelled care, staff communication and prolonged privacy risk. For defenders: segment clinical systems, minimize privileged access, enforce phishing-resistant multifactor authentication and monitor unusual outbound data transfers. Patients and staff should avoid engaging with anyone claiming responsibility for the attack. The larger lesson is that restored systems do not eliminate the risk from data that may have been copied.
What Defenders Should Do
Review downtime procedures and identity controls now, with special attention to privileged accounts and clinical network segmentation.