The facts
The system diverted ambulances to other health providers from 12:30 to 14:30 local time on 26 October and suspended outpatient surgeries and appointments for the rest of that day. [1][2]
The university said its assessment found affected end-user devices, without penetration of core systems or servers. This is the institution’s account of its investigation. [1]
State and federal law enforcement were notified. UNM said it made no concessions to the group behind the threat and warned of possible follow-on scams. [1]
The Record reported that UNM Health operates New Mexico’s only Level I trauma center and children’s hospital. Its report was published on 27 October, before the university’s latest restoration update. [2]
Still unconfirmed
- The attack method and any theft of patient or employee information have not been established in the checked institutional statement. A criminal group’s claims are not treated as verified.
Corrections & updates
Correction: Filed this cybersecurity report under Security instead of Technology.
Sources
References support the numbered facts above. Source checks: 29 Oct 2026, 01:08 UTC.
- Cybersecurity incident and 28 October restoration update
University of New Mexico Health Sciences Center · Primary source · 28 Oct 2026
The same page retains dated 26–27 October statements; the latest update is timestamped 12:39 p.m. on 28 October.
- Hospital care disrupted by cyberattack
The Record, Recorded Future News · Reporting · 27 Oct 2026