INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

UNM Health Cancels Surgeries Amid Cyber Incident

| 2026-10-27 16:45 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
The University of New Mexico Health Sciences Center (UNM HSC) was hit by a cyber incident on October 26, 2026, resulting in the cancellation of surgeries and diversion of ambulances. The entity behind the attack is reportedly BYOD, which claimed to have compromised 36,000 machines and exfiltrated sensitive data from UNHSC, including student and employee personally identifiable information (PII), research data, student records, and internal emails. All students enrolled at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health were told to leave campus on Monday, while classes at UNM's Central and branch campuses are not affected. The incident has been ongoing since October 26, with operations resuming in phases as it was safe to do so, but the current status is that all appointments, including scheduled surgeries, remain cancelled for now.
Technical Mitigations AI-generated
• Patch BYOD ransomware group's vulnerabilities to prevent future attacks. • Monitor for indicators of a potential BYOD attack, such as unusual network activity or data exfiltration attempts. • Implement robust backup and recovery procedures to quickly restore critical systems in the event of a cyber incident.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
FIVE_EYES FIVE_EYES healthhealth educationeducation
Incident Timeline
‎Monday October 26
The medical center disclosed a cyber incident on Monday October 26 at 2.30pm MDT, cancelling all scheduled surgeries and diverting ambulances for the rest of the day.
organisation MDT
The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.
‎October 26
Threat actors used a cyber attack to force UNM Health to cancel surgeries and divert ambulances on October 26.
organisation UNM Health
“UNM Health patients should not show up to UNM Health facilities on October 26.
organisation Clinical Services Resume
Clinical Services Resume but Classes Cancelled A further update posted at 10.27pm on October 26 confirmed that all UNM Health hospitals had reopened, and clinics would resume regularly scheduled appointments and procedures from Tuesday, October 27.
‎Tuesday, October 27
Threat actors used a cyber attack to target UNM Health, forcing the cancellation of surgeries and diverting ambulances.
organisation Clinical Services Resume
Clinical Services Resume but Classes Cancelled A further update posted at 10.27pm on October 26 confirmed that all UNM Health hospitals had reopened, and clinics would resume regularly scheduled appointments and procedures from Tuesday, October 27.
organisation the UNM School of Medicine, College of Nursing,
All classes at the UNM School of Medicine, College of Nursing, College of Pharmacy and College of Population Health were also canceled on Tuesday, October 27, including online and remote classes, while non-essential employees will remain at home.
‎2026/10/27
The University of New Mexico Health Sciences Center (UNM HSC) was reportedly hit by a BYOD ransomware attack, resulting in the cancellation of surgeries and diversion of ambulances.
organisation the University of New Mexico
Cybersecurity intelligence firm VenariX revealed on X that the group listed the University of New Mexico on its data leak site, claiming to have compromised 36,000 machines and exfiltrated sensitive data.
infrastructure 36,000 machines
Cybersecurity intelligence firm VenariX revealed on X that the group listed the University of New Mexico on its data leak site, claiming to have compromised 36,000 machines and exfiltrated sensitive data.
organisation Healthcare Sector Records Tenfold Increase
Read now: UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks All students enrolled at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health were told to leave campus on Monday.
organisation College of Population Health
Read now: UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks All students enrolled at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health were told to leave campus on Monday.
organisation BYOD
However, the emerging ransomware group BYOD has reportedly claimed to be behind the incident affecting UNM HSC.
organisation UNM HSC
However, the emerging ransomware group BYOD has reportedly claimed to be behind the incident affecting UNM HSC.
organisation Cyber Incident Forces UNM Health
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances.
organisation UNM
As part of its remediation efforts, UNM canceled classes on the Health Sciences campus and sent non-essential employees home.
organisation Health Sciences
As part of its remediation efforts, UNM canceled classes on the Health Sciences campus and sent non-essential employees home.
organisation UNM’s Central
However, classes at UNM’s Central and branch campuses are not affected.
organisation PII
This data allegedly includes student and employee personally identifiable information (PII), research data, student records and internal emails.
Tactical Metrics
Metrics
infrastructure
36,000
Machines
Cybersecurity intelligence firm VenariX revealed on X that the group listed the University of New Mexico on its data leak site, claiming to have compromised 36,000 machines and exfiltrated sensitive data.
Intelligence Sources
Infosecurity-Magazine 2026-10-27