The University of New Mexico Health System faced a significant cybersecurity breach that forced the diversion of ambulances and the cancellation of surgeries. The incident affected its main hospital in Albuquerque and over 30 clinics, leading the institution to advise individuals not to visit. This disruption impacted New Mexico's only Level 1 trauma center, which handles around 100,000 emergency room visits annually and conducts approximately 900,000 outpatient visits each year. In response, Presbyterian Healthcare Services and Lovelace Health System coordinated with UNM Health to manage the overflow of patients.
Employees reported hearing messages on their computers claiming that student, employee, and patient data had been compromised. Although the hospital network began resuming its operations in phases later in the day, the full extent of the breach remained unclear. A spokesperson for UNM Health declined to comment on the ongoing investigation, which involves law enforcement agencies including the FBI.
The incident highlights vulnerabilities in digital systems that are critical to essential services such as healthcare. Josephine Wolff, a cybersecurity policy professor, noted the unusual nature of the breach, which included broadcasting messages on computers. This event underscores the ongoing challenges in fortifying defenses against cyber threats.
As a result of the attack, scheduled appointments were canceled and classes at the UNM Health Sciences Center, the state's largest academic medical center, were disrupted. The incident serves as a reminder of the persistent threat ransomware poses to healthcare institutions and the crucial need for robust cybersecurity measures.

