Cybersecurity issue forces New Mexico hospital to divert patients and close clinics

Cybersecurity issue forces New Mexico hospital to divert patients and close clinics The University of New Mexico Health System (UNM Health) has been thrown into emergency mode after a sophisticated cyber‑attack crippled its computer networks on Tuesday. The breach, which security experts say appears to be ransomware‑related, has forced the flagship hospital in Albuquerque to divert incoming patients and temporarily shut down several outpatient clinics across the state. Hospital administrators say that while no patient data has been confirmed lost, the disruption to electronic medical records, scheduling software and pharmacy systems is already affecting care for thousands of New Mexicans..

IT staff and external cyber‑forensics teams were mobilised within hours of the intrusion, working around the clock to isolate compromised servers and assess the extent of the damage. According to a statement released by UNM Health, “our priority is to restore safe, reliable services while protecting patient confidentiality.” The statement added that the institution has engaged a leading cybersecurity firm and is cooperating fully with federal authorities, including the FBI’s cybercrime division, to investigate the incident. The immediate impact has been most visible in the university’s flagship teaching hospital, where emergency department staff were forced to revert to paper‑based triage and medication charts..

“We are seeing patients being rerouted to neighboring facilities, including Loveland Health and Presbyterian Hospital,” said Dr Maria Alvarez, the emergency physician on duty. “Our capacity to admit new patients is severely limited, and we are relying on manual processes that are far slower than our usual digital workflow.” In addition to the emergency department, three specialty clinics – oncology, cardiology and orthopaedics – were ordered to close their doors pending a full systems audit. The closures have left a gap in services for patients undergoing chemotherapy, cardiac monitoring and joint replacement follow‑ups, many of whom now face weeks of delayed appointments..

Hospital officials have arranged for some of these patients to be transferred to private providers, but the surge in demand is already stretching the state’s already strained healthcare resources. The cyber incident arrives at a delicate moment for New Mexico’s health sector, which has been grappling with staffing shortages and budget constraints exacerbated by the pandemic. State health commissioner Dr Luis Martinez warned that “any disruption to a major health system reverberates throughout the entire network of care.” He called on the federal government to accelerate funding for cybersecurity upgrades in hospitals, a plea echoed by the American Hospital Association, which has highlighted the growing threat of ransomware to the nation’s critical infrastructure..

Financial repercussions are also looming. UNM Health, a public‑university‑affiliated system, estimates that the attack could cost upwards of $12 million in immediate remediation, lost revenue and overtime pay for staff. Insurance coverage for cyber‑incidents varies, and the university’s board is reviewing its policies to ensure adequate protection against future threats..

Meanwhile, the hospital’s leadership has pledged to keep the public informed, publishing daily updates on its website and through local media outlets. Patients who have already been treated at the hospital during the outage are being contacted to confirm that their records are intact. “We have no evidence that personal health information has been exfiltrated,” said Karen Whitfield, UNM Health’s chief information security officer, “but we are conducting a thorough forensic analysis to verify that no data was accessed or transferred.” The hospital has offered free credit‑monitoring services to anyone whose information might be compromised, a precaution increasingly common after high‑profile cyber incidents..

The attack has reignited debate over the adequacy of cybersecurity training for medical staff. Many clinicians admit they receive only minimal instruction on recognising phishing emails or suspicious attachments – the most common entry point for ransomware. UNM Health has announced a mandatory, week‑long training programme for all employees, covering best practices for password management, device encryption and incident reporting..

The initiative is part of a broader strategy to embed a “culture of cyber‑hygiene” across the health system. Local law enforcement officials have confirmed that the investigation is ongoing, but have not disclosed whether any suspects have been identified. “We are treating this as a serious crime against public safety,” said Albuquerque Police Department cyber‑crime unit chief Detective Elena Ramirez..

“Our teams are working in concert with federal partners to trace the digital footprints left by the attackers and to determine whether any ransom demands have been made.” So far, the hospital has not been pressured to pay a sum, a decision that aligns with the Department of Health and Human Services’ guidance against rewarding criminal activity. The broader medical community is watching closely, as similar attacks have hit hospitals in California, Texas and Florida over the past year. In each case, the fallout has included delayed surgeries, cancelled appointments and, in some instances, patient deaths linked to the loss of timely care..

Experts warn that the healthcare sector’s reliance on interconnected devices – from imaging scanners to infusion pumps – creates a vast attack surface that criminals are keen to exploit. Legislators in Santa Fe have scheduled an emergency hearing on the matter for next week, inviting cybersecurity experts, hospital administrators and patient advocates to discuss potential regulatory reforms. Proposals on the table include mandatory minimum standards for network segmentation, regular penetration testing and a state‑wide information‑sharing hub to alert providers of emerging threats..

“We need to move from reactive responses to proactive defence,” asserted State Senator Rosa Delgado, who chairs the Health and Human Services Committee. For patients currently affected by the disruptions, UNM Health has set up a dedicated helpline and an online portal where individuals can check the status of appointments, request referrals and receive guidance on navigating the temporary changes. The hospital’s social media accounts have been inundated with queries.