University of New Mexico Foundation

36,000 Machines Compromised, both AD forests (Main Campus + Hospital Sector(with appointments, patient information + research)) With GPOs, Two Oracle databases, every student + employee PII (including SSNs), research information, entire Entra Tenant, Oracle HR + Payroll + Banner Student Records, Internal Emails, Cerner EHR rosters. This is your entire network and infrastructure compromised, the entire university COMPLETELY. Anyways, you know where to find us (contact tab). We will take you down when communication has been established between our team and yours.

University of New Mexico Foundation notified donors in May 2017 that an unauthorized individual accessed its network via a security services provider account in mid-April 2017. Affected data included names, contact info, SSNs, DOBs, and bank details. The Foundation engaged law enforcement and provided 12 months of credit monitoring.

University of New Mexico Foundation notified NH AG of a data breach discovered in mid-April 2017. An unauthorized individual accessed the network via a managed services provider account starting around Feb 16, 2017. Approximately 23,000 individuals (including 35 NH residents) were notified. Data exposed included names, SSNs, DOBs, and bank account numbers. Investigation is ongoing.

University Of New Mexico Foundation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-05-15. 148 Massachusetts residents were affected. The report records the breach type as electronic.

The University of New Mexico Foundation disclosed that an unauthorized individual gained access to its network via a security services provider account in mid-April 2017. Affected data included names, contact info, SSNs, bank account/routing numbers, and employment data for donors and employees. The investigation was ongoing at the time of notification. Credit monitoring was offered.

The University of New Mexico reported to HHS on 2016-06-03 a Unauthorized Access/Disclosure affecting 2827 individuals. Breached information located on Paper/Films. The covered entity inadvertently mailed invoices intended for third party payers to random patients’ addresses due to an error in the billing system. The PHI included patients' names, patient care service categories, clinic names, pharmacies, and dates of service.