Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulance
The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.

The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.
UNM Health patients should not show up to UNM Health facilities on October 26; emergencies should be handled by 911 and non-emergencies should be delayed until further notice, the update read.
A further update posted at 10.27pm on October 26 confirmed that all UNM Health hospitals had reopened, and clinics would resume regularly scheduled appointments and procedures from Tuesday, October 27.
We will work with patients to reschedule missed appointments and procedures, HSC added, and however, the emerging ransomware group BYOD has reportedly claimed to be behind the incident affecting UNM HSC.
At 2:30pm, UNM Health began resuming operations and bringing systems back online in phases, as it was safe to do so.
Read now: UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks All students enrolled at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health were told to leave campus on Monday.
However, classes at UNM’s Central and branch campuses are not affected.
Cybersecurity intelligence firm VenariX revealed on X that the group listed the University of New Mexico on its data leak site, claiming to have compromised 36,000 machines and exfiltrated sensitive data.
All classes at the UNM School of Medicine, College of Nursing, College of Pharmacy and College of Population Health were also canceled on Tuesday, October 27, including online and remote classes, while non-essential employees will remain at home.
What happened
The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.
UNM Health patients should not show up to UNM Health facilities on October 26; emergencies should be handled by 911 and non-emergencies should be delayed until further notice, the update read.
What changed
A further update posted at 10.27pm on October 26 confirmed that all UNM Health hospitals had reopened, and clinics would resume regularly scheduled appointments and procedures from Tuesday, October 27.
We will work with patients to reschedule missed appointments and procedures, HSC added, and however, the emerging ransomware group BYOD has reportedly claimed to be behind the incident affecting UNM HSC.
Who is affected
At 2:30pm, UNM Health began resuming operations and bringing systems back online in phases, as it was safe to do so.
Read now: UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks All students enrolled at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health were told to leave campus on Monday.
Why it matters
However, classes at UNM’s Central and branch campuses are not affected.
Cybersecurity intelligence firm VenariX revealed on X that the group listed the University of New Mexico on its data leak site, claiming to have compromised 36,000 machines and exfiltrated sensitive data.
Technical details
All classes at the UNM School of Medicine, College of Nursing, College of Pharmacy and College of Population Health were also canceled on Tuesday, October 27, including online and remote classes, while non-essential employees will remain at home.
Attribution
Infosecurity Magazine: The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.
What to watch next
Watch for revised vendor guidance, fixed versions and mitigation updates.