ALBUQUERQUE — A cybersecurity issue at the University of New Mexico Health System on Monday prompted the network to divert ambulances to other hospitals, cancel appointments across its outpatient clinics and briefly left New Mexico without an emergency department equipped to treat the most serious injuries.
Immediate disruptions and system response
The health system asked patients not to report to its main hospital in Albuquerque and suspended appointments at more than 30 clinics while staff worked to contain and resolve the problem. The network conducts about 900,000 outpatient visits and receives approximately 100,000 emergency room visits each year, according to publicly available information from the system.
Officials said hospitals and clinics began resuming operations in phases later Monday as teams worked to restore services. In the interim, other providers in the state coordinated to handle the surge of patients. Presbyterian Healthcare Services and Lovelace Health System confirmed they were accepting additional transfers and coordinating with UNM Health.
Extent of the incident and law enforcement involvement
Multiple employees at the health system reported seeing messages on their computers Monday morning that claimed to have stolen student and employee data as well as patient information. The organization declined to provide details about the nature or scope of the incident, saying it remains an active law enforcement investigation.
“We are assisting our partner,” FBI spokesperson Margot Cravens in Albuquerque said, declining further comment.
Representatives for the Bernalillo County Sheriff’s Office and the Albuquerque Police Department did not immediately respond to requests for comment.
Why the disruption mattered statewide
UNM Health operates New Mexico's only Level 1 trauma center, a designation for facilities that provide the highest level of trauma care around the clock. With the main hospital limiting emergency services during the incident, ambulances carrying the most critically injured patients had to be redirected to hospitals in other parts of the state and region.
The temporary loss of a Level 1 trauma center can have wide-ranging consequences: longer transport times for the critically injured, increased strain on neighboring hospitals and potential delays in time-sensitive interventions that can affect outcomes.
What officials and patients were told
The health system issued public advisories asking people not to come to the main hospital unless instructed and warned that many outpatient appointments were canceled. As operations resumed in phases later Monday, officials urged patience and asked patients to check with their clinics before coming in.
- Do not report to UNM’s main hospital unless explicitly directed to do so by health officials.
- Contact your clinic or provider to confirm appointment status before traveling.
- For emergencies, follow local EMS guidance; some ambulances may be routed to other systems.
Context and ongoing concerns
Health care organizations are frequent targets of cyberattacks and disruptions, which can affect scheduling systems, medical records and even medical devices. The health system did not disclose whether patient care systems such as electronic health records were directly affected or whether operations were curtailed as a precaution.
Because the incident is under investigation, the university's health system provided few specifics about what data, if any, were accessed or exfiltrated. Officials emphasized efforts to restore services safely and to work with law enforcement partners.
Numbers at a glance
| Metric | Figure |
|---|---|
| Annual outpatient visits (UNM Health) | 900,000 |
| Annual ER visits (UNM Health) | 100,000 |
| UNM clinics affected | More than 30 |
What comes next
Officials said recovery proceeded in phases and that UNM Health was working to bring services back on line while preserving patient safety. The FBI said it was assisting investigators; public health and emergency management partners in the state were monitoring the situation.
For now, the incident highlights the vulnerability of health care infrastructure to cyber disruptions and the need for coordinated response plans among hospitals, emergency services and state authorities. Patients should confirm appointments directly with their providers and follow guidance from emergency services if urgent care is needed.
Reporting for this article included material from the Associated Press. Information about the incident remains limited while the investigation continues.
