University of New Mexico clinics reopen after cyberattack
UNM Health resumed scheduled appointments and procedures on October 27, while health-sciences classes remained canceled for a second day.
UNM Health resumed scheduled appointments and procedures on October 27, while health-sciences classes remained canceled for a second day.

University of New Mexico (UNM) clinics resumed scheduled appointments and procedures on October 27 after a cyberattack. UNM said its hospitals were fully open, ambulance traffic was operating normally and all critical electronic systems at its Health Sciences Center were back online.
The center includes UNM Health, the university’s clinical care system. The recovery followed an October 26 shutdown that diverted ambulances and halted outpatient care; health-sciences classes were also canceled for October 27.
The center said its security assessment found that the attack affected some end-user devices—the computers and other devices people use—but did not penetrate core systems or servers. UNM credited its information technology security teams and outside partners with securing the network and enabling the recovery, in a statement carried by BleepingComputer.
The clinical recovery covers UNM Hospital and Sandoval Regional Medical Center (SRMC), as well as scheduled clinic appointments and procedures. It is separate from the academic closures in place on October 27.
UNM said it temporarily limited acceptance of new patients from 12:30 to 2:30 p.m. local time on October 26. Ambulances were diverted to hospitals in Albuquerque and Santa Fe. System outages also forced the suspension of outpatient surgeries and appointments for the rest of the day.
The university’s initial 2:30 p.m. notice canceled appointments at all clinics and told patients not to attend UNM Health facilities that day. Its evening update said operations and systems had begun returning in phases at 2:30 p.m., as it became safe to restore them. By 10:27 p.m., UNM said both hospitals were open and announced that scheduled clinic care would resume on October 27.

The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
UNM said its security teams immediately took steps to contain the attack and protect the network. Canceling health-sciences classes and sending nonessential employees home were part of those measures. The university notified state and federal law enforcement, brought in outside partners to help investigate and activated an emergency coordination center to guide staff, students and care providers.
A purported ransomware group called Byod claimed responsibility and alleged it had compromised 36,000 machines and every student’s and employee’s personal data, The Register said. Those allegations remain unverified and do not establish the scale of any breach. UNM has not confirmed the attack method, the scope of any data loss or whether ransomware—software that locks systems or data to demand payment—was used.
Health Sciences Center academic and research units were closed on October 27. Classes in medicine, nursing, pharmacy and population health were canceled for a second day, including online and remote classes. Classes at UNM’s Central and branch campuses were unaffected.
UNM asked nonessential Health Sciences Center employees to remain home on October 27. Essential and clinical employees, along with students with clinical responsibilities, were instructed to report to their usual work or clinical locations.
Scheduled clinical care resumed on October 27. UNM said it would work with patients to reschedule appointments and procedures missed during the October 26 shutdown.

The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min

The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min
Update ·
UNM says all critical electronic systems are back online and ambulance traffic is normal, with some user devices affected but no penetration of core systems or servers.