
On June 3, 2025, Southwest Care Center, a prominent nonprofit healthcare organization in New Mexico, experienced a cybersecurity incident. After discovering the incident, Southwest Care Center engaged third-party forensic specialists to secure their systems and investigate the extent of unauthorized activity.
The breach was later claimed by the MEDUSA ransomware group, which posted on the dark web on June 27, 2025, that it had obtained 143.9 GB of data from the organization and threatened to publish the information within 11 to 12 days.
On Dec. 18, 2025, the investigation determined that an unauthorized third party may have acquired sensitive personal information as a result of the breach. The types of consumer information exposed include first and last names, personal information and, or protected health information (PHI).
Southwest Care Center posted a notice of the incident on its website.
To support those potentially affected, Southwest Care Center is providing written notice to all impacted individuals. The organization has also arranged for complimentary credit monitoring and identity theft protection services for twelve months at no cost to those whose information may have been compromised.
Impacted individuals are strongly encouraged to enroll in these services and follow the recommendations outlined in the notification letter to help protect their information.
Given the nature of the breach and the involvement of a ransomware group, individuals should remain vigilant for suspicious communications or activity involving their personal or health information. Monitoring credit reports, utilizing the offered identity protection services, and promptly reporting any suspected fraud are important steps to take.
For individuals seeking more information or with questions about the incident, Southwest Care Center has set up a dedicated call center at 1-833-303-5159, available Monday through Friday, from 8 a.m. to 8 p.m. ET, excluding holidays.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)