The University of New Mexico Health Sciences Center (HSC), which includes the UNM Health hospital and clinic system, says it experienced a cybersecurity event on Monday 26 October 2026.

In updates on its newsroom, UNM HSC said its IT security teams immediately took steps to contain the event, notified state and federal law enforcement and engaged external partners to help investigate, and that leadership activated an Emergency Operations Center.

UNM HSC said all ambulance traffic was diverted to other hospitals and that system outages required it to suspend outpatient surgeries and appointments for the rest of the day; The Record reports ambulances were diverted to health systems in Albuquerque and Santa Fe for about two hours.

UNM HSC later said UNM Health began bringing systems back online in phases, that all UNM Health hospitals (UNM Hospital and SRMC) are open and that clinics would resume scheduled appointments and procedures on Tuesday 27 October; classes at the School of Medicine, College of Nursing, College of Pharmacy and College of Population Health, including online classes, were cancelled on 27 October. "Because this remains an active law enforcement investigation, we are limited in what we can share at this time," UNM HSC said.

According to The Record, a spokesperson did not respond to questions about whether ransomware was involved, and a ransomware gang called BYOD, which The Record says emerged last month, claimed the attack, saying it had compromised 36,000 machines on the university's main campus and hospital and stolen information on students, patients and employees.

Help Net Security reports that BYOD's leak-site claims, which also list Oracle databases, student and employee personal data including Social Security numbers, the university's Entra tenant and Cerner EHR rosters, are unconfirmed. Wire: The Record (27 Oct); Help Net Security (27 Oct).