UNM Health Sciences Cyberattack Forces Two Days of Class Cancellations and Ambulance Diversions
Written by AI from the linked story. Not reviewed by an editor. How this works
A cyberattack targeting the University of New Mexico's Health Sciences Center caused cascading disruptions, including canceled classes, suspended appointments, and ambulance diversions — hallmarks of inadequate network segmentation between administrative, academic, and clinical systems. When a single attack can simultaneously disable university operations and divert emergency medical care, it signals that critical healthcare infrastructure was not sufficiently isolated from broader institutional networks. The multi-day recovery period further suggests incident response plans were either absent, untested, or insufficiently resourced for a healthcare environment. This incident matters because lives can be endangered when hospital operations are disrupted, making healthcare cybersecurity a patient safety issue, not merely an IT concern.
Tactical Insight
Immediate actions
- Activate and rehearse your incident response plan immediately, including pre-designated roles for IT, clinical operations, communications, and executive leadership.
- Implement emergency network segmentation to isolate clinical and patient-care systems from administrative and academic networks during active incidents.
Long-term improvements
- Design and enforce permanent network segmentation so that a compromise of academic or administrative systems cannot propagate into healthcare operational technology (OT) or electronic health record (EHR) environments.
- Establish and regularly test downtime procedures for clinical operations so that care can continue safely when systems are taken offline.
- Conduct annual tabletop exercises that specifically simulate cyberattacks affecting both university and hospital operations simultaneously.
Detection & recovery measures
- Deploy continuous monitoring and anomaly detection across all network segments, with dedicated alerting for lateral movement between academic and clinical zones.
- Maintain offline, tested backups of all critical clinical and administrative systems with documented recovery time objectives (RTOs) to minimize multi-day outages.