GoKawiilUNM Health hit by Byod ransomware attack, disrupting surgeries and admissions
The University of New Mexico Health Sciences Center suffered a cyberattack that forced it to limit new patient admissions, divert ambulances, and suspend outpatient surgeries and appointments. UNM says its hospital and Sandoval Regional Medical Center remain open and clinics resumed scheduled care on Tuesday, though classes at its four health sciences schools were canceled. A new ransomware group calling itself Byod has claimed responsibility, saying it compromised roughly 36,000 systems including Active Directory, Microsoft Entra, Oracle databases, and records containing Social Security numbers, payroll data, research files, and patient information.
GoKawiil's interpretation of the reporting above, not reported fact.
UNM Health runs New Mexico's only Level I trauma center and handles over a million patient visits a year, so even a brief disruption to admissions and surgeries could affect emergency care across the region. The attackers' claim to have accessed SSNs, HR records, and hospital patient data suggests a serious data exposure risk for students, staff, and patients if verified. The group's statement that it would remove its leak post once UNM communicates with it points to an apparent extortion attempt, according to the threat actor's own claims.
- UNM Health disrupted admissions, ambulance routing, and outpatient surgeries after a cyberattack.
- A ransomware group called Byod claims it compromised 36,000 systems and stole sensitive data including SSNs and patient records.
- Hospitals remain open and most appointments resumed Tuesday, though some classes and nonessential operations were halted.
Source: bleepingcomputer.com, 2026-10-27
Published there as: “UNM Health ransomware attack disrupts patient care, surgeries”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.