New Mexico Cyber Attacks

Infrastructure Affected

Public Safety
Government
Medical
Education
 
Back to Archive
New Mexico.jpg
 

Public Safety

New Mexico County Hit by Suspected Ransomware Attack, Bernalillo County

Breach Type – Unknown, Malware

Bank Info Security

  • "The government buildings in Bernalillo County, New Mexico, were closed after the county's IT systems reportedly suffered a ransomware attack on Wednesday."
  • “County officials say all affected systems were taken offline and servers were isolated following the attack."
  • "The county says it is working with third-party vendors to restore its systems to full operation as soon as possible."
  • "Authorities and security teams involved with the investigation have not yet publicly described the malware strain or attributed the crime to a particular ransomware gang."
Read More
KOAT

  • “Public safety departments, including 911 services are operating as normal but are using back-up contingencies, according to the county.”
  • “If someone needs to dial 911 and emergency services, dispatchers will answer and can dispatch to a fire or to some other emergency, as well as law enforcement," Bland said.”
  • “Bernalillo County officials say they are still trying to resolve the issue.”
Read More

 
City of Farmington Police Department

Breach Type - Ransomware

KRQE

  • Virus infiltrates computers
  • City of Farmington a target of malicious activity
  • Police department offline as well as all other city departments
Read More

 
BACK TO TOP

Local Government

Rio Arriba County Audit Reveals IT Concerns

Breach Type – Unknown, Ransomware

Rio Grande Sun

  • The county was the target of a ransomware attack, which cost the county $185,000 to pay the ransom and an additional $70,000 to restore the lost systems and the county’s data
  • The county’s Deputy County Manager said they had recently completed a cyber audit and were using that assessment data to ask for capital to strengthen their computer systems
  • The audit identified major deficiencies in information technology control. If found a wide range of different operating systems operated on different patches and that the county did not have a consistent system for computers up to date on current patches
Read More

 
Rio Arriba County

Breach Type – Unknown, Ransomware

Santa Fe New Mexican

  • Officials stated that almost every server on network was affected
  • Backup servers were also affected by cyberattack
  • Insurance company and federal law enforcement were notified
Read More

 
Bernalillo County Government, Bernalillo County

Breach Type – Phishing, Other

KOAT Action 7 News

  • County lost nearly $500,000 in phishing cyberattack
  • Officials discovered bad actor's created fake accounts
  • County IT assisted by FBI and other authorities
Read More

 
San Miguel County Government Systems, San Miguel County

Breach Type – Unknown, Ransomware

Las Vegas Optic

  • Unknown bad actors utilized ransomware during cyberattack
  • Officials were unsure about extent of potential damage
  • Personal or private information may have been leaked
Read More
ABQ Journal

  • Ransomware attack disabled school district's network
  • Payroll, personnel, and student data remained safe
  • Officials were uncertain as to extent of the cyberattack
Read More

 
New Mexico Public Regulation Commission, State of New Mexico

Breach Type – Hacking, Ransomware

ABQ Journal

  • Public utility regulatory agency hit in cyberattack
  • State Attorney General's office requested money for cybercrime unit
  • Additional state agency's website went down during attack
Read More

 
Lea County Government, Lea County

Breach Type - Phishing, Other

The Kansas City Star

  • New Mexico county fell victim to phishing scam
  • Fraudulent vendor sought payment of $32,500, employee paid the wire transfer
  • Officials learned of scam and immediately reported to Lovington Police Department
Read More

 
City of Alamogordo, Otero County

Breach Type - Phishing, Other

Alamogordo News

  • Alamogordo government falls victim to phishing scheme
  • Fraudulent emails probed employees into changing bank account information
  • Payments went through to faulty accounts
  • City has cyber insurance and police leading investigation
Read More

 
BACK TO TOP

Medical

Hacker used malware to remove 69,000 patient’s files from New Mexico hospital's IT network, San Juan County

Breach Type – Hacking, Malware

Becker Hospital Review

  • "San Juan Regional Medical Center in Farmington, N.M., is again notifying nearly 69,000 patients with more information about a previous malware attack that exposed their protected health information."
  • "The hospital reported the breach to HHS on June 4, saying it affected 68,792 individuals. In June, the hospital said it discovered that an unauthorized individual accessed its network from Sept. 7-8, 2020, during which the hacker removed some information."
  • "San Juan Regional said it has no evidence that any of the stolen information has been misused, but it is sending out another round of notification letters, as its previous "manual document review of the impacted files was extensive and required significant time to complete,"
  • "Some of the files the hacker removed contained patient information including names, Social Security numbers, birthdates, driver's license numbers, financial account numbers and medical record details."
Read More

 
637,000 patients exposed in UNM Health data breach, University of New Mexico Health, Bernalillo County

Breach Type – Unknown, Data Breach

Becker Hospital Review

  • "A hacking incident at the University of New Mexico Health in Ålbuquerque exposed the information of 637,252 patients"
  • "The health system began notifying patients who may have been affected Aug. 3."
  • " the health system discovered that an unauthorized third party gained access to its network and may have obtained files containing patient information May 2."
  • -"The exposed files contained patient names, addresses, birthdates, medical record numbers and health insurance details. Some patients' Social Security numbers were exposed"
  • "The health system said it is providing free credit- and identity-monitoring services to patients whose Social Security numbers were exposed.''
Read More

 
Rehoboth McKinley Christian Hospital, McKinley County

Breach Type – Unknown, Malware

The Atlanta Journal-Constitution

  • Hospital confirmed breach of computer systems
  • Cyberattack left hospital unable to access records
  • Officials did not comment on possible law enforcement assistance
Read More
Becker's Hospital Review

  • In February the Health center confirmed that a cyber attack had lead them to take certain systems offline as precautionary measure
  • Sensitive employee files were posted online by the hacker group
  • Information exposed included employee job applications and background check authorizations with Social Security numbers
Read More
The Daily Swig

  • Rehoboth McKinley Christian Health Care Services (RMCHCS), a non-profit healthcare provider operating in Arizona and New Mexico, has reported a data breach impacting around 200,000 patients and employees
  • its “investigation has found that an unauthorized party was able to access certain systems that contained patient information and remove some data between January 21 and February 5, 2021”
  • The potentially exposed information, it said, includes names, dates of birth, postal addresses, telephone numbers, and email addresses, as well as Social Security, driver’s license, passport, and (for Native Americans) tribal ID numbers
  • “In response to this incident, RMCHCS has enhanced its security and monitoring as well as hardened its systems as appropriate to minimize the risk of any similar incident in the future,”
Read More

 
Presbyterian Healthcare Services, Bernalillo County

Breach Type – Phishing, Data Breach

Albuquerque Journal

  • Personal information accessed following phishing cyberattack
  • Officials notified approximately 183,000 patients that their information was breached
  • Name, date of birth, Social Security among leaked information
Read More

 
Roosevelt General Hospital, Roosevelt County

Breach Type – Unknown, Malware

ABC 7

  • Personal information system breached in malware cyberattack
  • IT department was able to secure and restore affected server
  • Names, addresses, DOB, SSNs among leaked information
Read More

 
BACK TO TOP

Education

University of New Mexico Law School, Bernalillo County

Breach Type – Unknown, Ransomware

ABQ Journal

  • A cyber attack has caused a hiccup in scheduling making some classes more difficult due to loss of teaching files
  • The attack lead to denial of access to email accounts and file sharing services
  • The law school is working with third parties to recover lost data and return to nominal status
Read More

 
Gadsden Independent School District, Doña Ana County

Breach Type - Unknown, Ransomware

KTSM

  • Ransomware cyberattack disabled school district network
  • Internet and online communications systems were disabled
  • School district was hit previously, caused email to be rebuilt
Read More

 
Las Cruces Public Schools, Doña Ana County

Breach Type – Unknown, Ransomware

Bleeping Computer

  • School system was forced to disable network to stop spread of cyberattack
  • IT officials discovered infected servers and promptly removed them from the network
  • Over 1,000 schools are believed to have been attacked in total
Read More

 
New Mexico Highlands University, San Miguel County

Breach Type – Unknown, Malware

KRQE

  • Ransomware cyberattack used against Houston County, Georgia Board of Education
  • Main website affected, created error messages when browsing
  • Board of Education one of multiple victims hit in Georgia
Read More

 
Gadsden Independent School District, Doña Ana County

Breach Type – Unknown, Ransomware

CBS4Local

  • Gadsden School District attacked with ransomware, encrypted domain controllers
  • Officials stated that personnel information and payroll system were unaffected
  • District advised that they notified Education Department
Read More

 
Taos Municipal Schools District, Taos County

Breach Type - Unknown, Ransomware

Taos News

  • Ransomware attack disabled digital services for Taos Municipal Schools District
  • Hackers demanded $5,000 ransom for return of control over the network
  • Officials believe no personal information was compromised, and IT department worked 20 hour shifts to fix websites
Read More

 
University of New Mexico

Breach Type - Data Breach

Albuquerque Journal

  • 23,000 potentially exposed after server breached by hackers
  • University of New Mexico notified potentially affected individuals
  • Data base accessed contained HR & financial information
  • The university offered no cost credit monitoring
Read More

 
BACK TO TOP