Russian-Linked Qilin Group Cripples Western New Mexico University in Ransomware Attack

Western New Mexico University (WNMU) in Silver City, New Mexico, has been severely impacted by a ransomware attack launched by the Russian-linked Qilin hacking group. The attack, detected on April 13, 2025, paralyzed the university's website, phone systems, and other digital infrastructure. Hackers encrypted WNMU systems, exfiltrated sensitive information — including employee Social Security numbers, driver’s licenses, and a full network map — and threatened to leak the data unless a ransom was paid. Internal documents revealed that the university is working with the FBI, New Mexico Higher Education Department, and cybersecurity firms to combat the breach.

Screenshot of a ransomware message on a Western New Mexico University employee’s laptop, showing Qilin hackers threatening to publish stolen data if demands are not met.
A Western New Mexico University employee’s laptop displays a ransomware note from the foreign hacking group Qilin, threatening to leak sensitive data unless a ransom is paid.

The disruption has left students and faculty struggling to access vital academic tools and delayed employee payroll deposits. Despite WNMU’s public portrayal of the issue as "technical difficulties," internal communications confirm the seriousness of the cyberattack. Qilin, operational since 2022 and known for “ransomware-as-a-service,” has targeted various sectors globally, including healthcare and journalism. The long-term impact on WNMU remains uncertain as investigations and recovery efforts continue, with concerns mounting among students about course completion and data safety.

Source

Subscribe to The Dysruption Hub

Don’t miss out on the latest issues. Sign up now to get access to the library of members-only issues.
[email protected]
Subscribe