Featured
NMHU nears a week of canceled classes because of ransomware attack
Classes at New Mexico Highlands University are now canceled through Sunday because of a ransomware attack.
A ransomware attack that has affected New Mexico Highlands University for nearly a week so far has caused officials to cancel classes through Tuesday.
It鈥檚 the latest in a string of cyberattacks targeting state entities.
New Mexico Highland鈥檚 Information Technology Services department identified a technology issue on April 3, verifying a few days later that the network issue stemmed from a ransomware attack.
The hack caused the Las Vegas, New Mexico, university to cancel all classes from Wednesday afternoon, through Tuesday, as of Monday afternoon.
The attack was identified on the server that operates the college鈥檚 internal portal for staff, students and faculty, university spokesperson David Lepre said, which is necessary in order to conduct classes.
Lepre said a majority of the campus also accesses payroll through the college鈥檚 network, so New Mexico Highlands set up a help center for people to log their time via phone instead. The university is working to make sure employees and student employees get paid on time, according to an with updates on the cyberattack.
New Mexico Highlands is still investigating the ransomware attack and then can start mitigation work once officials know the full extent of the hack, Lepre said.
He said the university has been working with the state鈥檚 Department of Information Technology and the Higher Education Department to resolve the issue.
鈥淲e鈥檙e just working as fast as we can to restore service as soon as possible to the campus community,鈥 he said.
There should be another update from the university on the status of the attack Tuesday afternoon, Lepre said.
He said that according to New Mexico Highlands University鈥檚 vendors, which specialize in cybersecurity and mitigation, the school isn鈥檛 the first state entity to be attacked by this specific group. He said he personally didn鈥檛 have the name of the entity and it wouldn鈥檛 be in the public interest to publicize it anyway.
Last week, Gov. Michelle Lujan Grisham issued an executive order focused on enhancing cybersecurity protection among state agencies. She wrote in the order that 鈥渁 surge in cybersecurity breaches and hacks poses a severe threat to the integrity of sensitive information held by state agencies.鈥
The order directs the state鈥檚 IT department to conduct IT and security assessments on state agencies. By Nov. 1, state agencies have to comply with specific security protocols from the National Institute of Standards and Technology.
In the order, Lujan Grisham encouraged public bodies that weren鈥檛 required to follow the cybersecurity rules to do so anyway.
鈥淐ybersecurity is not just a technological issue; it鈥檚 a matter of public safety and national security,鈥 Lujan Grisham said in a statement. 鈥淭hat鈥檚 why I鈥檝e taken decisive action to fortify the resilience of our state agencies against potential cyber intrusions.鈥
A cybersecurity measure was one of the few bills that got through lawmakers in the most recent Legislature but not the governor. It was one of two pocket-vetoed bills.
Sen. Michael Padilla, D-sa国际传媒官网网页入口, previously told the Journal if he鈥檚 reelected, he plans to introduce a larger, more comprehensive IT package next year that would include the 2024 session bill, which he believed needed more work.