UNM Health Restores Operations After Cybersecurity Incident Disrupted Care
Summary
A cybersecurity event at UNM Health Sciences Center disrupted care and classes on Oct. 26. The university says some end-user devices were affected, core systems were not penetrated, and operations have resumed; a criminal investigation continues.
Key points
- UNM says security teams began containment around 11 a.m. on Oct. 26 after identifying a cybersecurity threat.
- The university’s assessment found some end-user devices were affected, but core systems and servers were not penetrated.
- Ambulances were diverted for about two hours, and outpatient surgeries and appointments were suspended for the day.
- Systems and services were restored in phases; clinical operations and academic and research activities have resumed.
- UNM notified state and federal law enforcement, and the incident remains under criminal investigation.
- UNM says it made no concessions to any group behind the threat and warns people not to engage with anyone claiming responsibility.
Article Details
- Victim Organization
- The University of New Mexico Health Sciences Center (HSC), including UNM Health
- Incident Type
- Cybersecurity incident affecting some end-user devices; UNM reported that core systems and servers were not penetrated.
- Incident Date
- 2026-10-26
- Disclosure Date
- 2026-10-26
- Operational Impact
- Ambulance traffic was diverted from 12:30 to 2:30 p.m. on October 26. Outages led to canceled outpatient surgeries and appointments for the remainder of the day, and classes and research activities were suspended. Operations were restored in phases; hospitals, clinics, classes, and research activities subsequently resumed.
- Ransom Or Extortion
- UNM said it made no concessions with any group behind the threat. The source warns that groups claiming responsibility may contact people, but reports no specific ransom demand or payment.
- Claim Status
- confirmed