University of New Mexico Health Sciences Center Experiences Disruptive Cyber Incident
The University of New Mexico Health Sciences Center (UNM HSC) recently faced a significant cyber incident that resulted in the cessation of scheduled surgeries and the redirection of ambulances. The medical center issued an announcement on Monday, October 26, at 2:30 PM MDT, alerting patients to the cancellation of all appointments, including those for surgeries, for the remainder of that day.
In a communication to the public, UNM Health emphasized, “UNM Health patients should not show up to UNM Health facilities on October 26. Emergencies should be handled by 911 and non-emergencies should be delayed until further notice.” This directive highlighted the severity of the situation, as patients were advised to refrain from seeking medical care at the facilities until further announcements could clarify the situation.
Later that evening, an update was provided at 10:27 PM, confirming that all UNM Health hospitals had resumed operations, with clinics expected to return to their usual schedules starting Tuesday, October 27. “At 2:30 PM, UNM Health began resuming operations and bringing systems back online in phases, as it was safe to do so. We will work with patients to reschedule missed appointments and procedures,” the Health Sciences Center added, indicating their commitment to restoring normalcy.
While operations at the medical center began to stabilize, there was a concurrent disruption within the educational realm of the Health Sciences campus. All students enrolled at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health were instructed to vacate the campus on Monday. In line with their remediation efforts, UNM canceled all classes on the Health Sciences campus, also sending non-essential employees home as a precautionary measure.
The following day, on Tuesday, October 27, all classes across the associated colleges were suspended, which included both in-person and online courses. Non-essential employees were to remain at home, reflecting the university’s efforts to maintain safety and security amidst the troubling events. It is noteworthy that while operations at the Health Sciences campus were disrupted, classes at UNM’s Central and branch campuses were unaffected, suggesting that the incident’s impact was somewhat localized.
As investigations into the incident unfolded, specific details regarding the nature of the cyberattack or the identity of potential perpetrators remained undisclosed. However, preliminary reports from the emerging ransomware group known as BYOD surfaced, claiming responsibility for the disruption at UNM HSC. Cybersecurity intelligence firm VenariX noted on X (formerly Twitter) that the group had listed the University of New Mexico on its data leak site, alleging a breach involving around 36,000 machines and the exfiltration of sensitive data.
Among the compromised information were reports of student and employee personally identifiable information (PII), along with research data, student records, and internal communications. BYOD’s claims suggested a total breach of network and infrastructure, stating, “This is your entire network and infrastructure compromised, the entire university COMPLETELY.” Such assertions raise serious concerns regarding data privacy and the overall security measures implemented at the institution.
The University of New Mexico Health Sciences Center plays a crucial role in the community, providing medical services to over one million patients annually, including approximately 900,000 outpatient visits and around 100,000 emergency room visits. Furthermore, the center had an enrollment of 2,670 students across its various programs in 2025, underlining its significance as an educational and healthcare institution.
As UNM HSC moves forward with its recovery efforts, the implications of this cyber incident could resonate across the healthcare and educational landscape, emphasizing the urgent need for enhanced cybersecurity protocols. The breach not only disrupts academic schedules and patient care but also raises critical questions regarding the safety of sensitive data in an age where cyber threats are becoming increasingly prevalent. With such incidents on the rise, institutions may be compelled to reassess their defenses and implement more stringent measures to safeguard both their networks and the sensitive information they hold.