DKDKCISSP
Threat Research

Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulance

The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.

DKCISSP News DeskInfosecurity Magazine27 Oct 2026, 10:15 pm3 min read
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulance
Image courtesy of Infosecurity Magazine. Original report
DKCISSP REPORT

The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.

UNM Health patients should not show up to UNM Health facilities on October 26; emergencies should be handled by 911 and non-emergencies should be delayed until further notice, the update read.

A further update posted at 10.27pm on October 26 confirmed that all UNM Health hospitals had reopened, and clinics would resume regularly scheduled appointments and procedures from Tuesday, October 27.

We will work with patients to reschedule missed appointments and procedures, HSC added, and however, the emerging ransomware group BYOD has reportedly claimed to be behind the incident affecting UNM HSC.

At 2:30pm, UNM Health began resuming operations and bringing systems back online in phases, as it was safe to do so.

Read now: UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks All students enrolled at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health were told to leave campus on Monday.

However, classes at UNM’s Central and branch campuses are not affected.

Cybersecurity intelligence firm VenariX revealed on X that the group listed the University of New Mexico on its data leak site, claiming to have compromised 36,000 machines and exfiltrated sensitive data.

All classes at the UNM School of Medicine, College of Nursing, College of Pharmacy and College of Population Health were also canceled on Tuesday, October 27, including online and remote classes, while non-essential employees will remain at home.

What happened

The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.

UNM Health patients should not show up to UNM Health facilities on October 26; emergencies should be handled by 911 and non-emergencies should be delayed until further notice, the update read.

What changed

A further update posted at 10.27pm on October 26 confirmed that all UNM Health hospitals had reopened, and clinics would resume regularly scheduled appointments and procedures from Tuesday, October 27.

We will work with patients to reschedule missed appointments and procedures, HSC added, and however, the emerging ransomware group BYOD has reportedly claimed to be behind the incident affecting UNM HSC.

Who is affected

At 2:30pm, UNM Health began resuming operations and bringing systems back online in phases, as it was safe to do so.

Read now: UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks All students enrolled at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health were told to leave campus on Monday.

Why it matters

However, classes at UNM’s Central and branch campuses are not affected.

Cybersecurity intelligence firm VenariX revealed on X that the group listed the University of New Mexico on its data leak site, claiming to have compromised 36,000 machines and exfiltrated sensitive data.

Technical details

All classes at the UNM School of Medicine, College of Nursing, College of Pharmacy and College of Population Health were also canceled on Tuesday, October 27, including online and remote classes, while non-essential employees will remain at home.

Attribution

Infosecurity Magazine: The medical center disclosed the incident on Monday October 26 at 2.30pm MDT, informing patients that all appointments, including scheduled surgeries, were cancelled for the rest of the day.

What to watch next

Watch for revised vendor guidance, fixed versions and mitigation updates.

MORE IN THREAT RESEARCH

More cybersecurity reporting

Crypto firm Binance covers 90% of losses after $6.3bn hackBBC News · 31 Oct 2026, 10:02 pmTrezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilisThe Hacker News · 30 Oct 2026, 5:51 pmMicrosoft finally fixes VPN issues caused by September updatesBleepingComputer · 30 Oct 2026, 4:50 pmOpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cutBleepingComputer · 30 Oct 2026, 5:05 am