Hospital cyberattack diverts ambulances and cancels surgeries
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Friday, October 30th, 2026.
Patient care was disrupted after a cyberattack affected the University of New Mexico Health Sciences Center and the hospitals and clinics it operates. Ambulances were diverted for a time, outpatient surgeries and appointments were suspended, and medical classes were cancelled. A ransomware group claimed responsibility and alleged broad data theft, but the university hadn’t confirmed those claims. Classes later resumed, and clinical operations were reported as fully functional.
Healthcare attacks can become safety and continuity events before anyone knows whether data was stolen. For leaders, recovery planning needs to cover patient diversion, cancelled care, staff communication and possible long-term privacy risk. For defenders, the priorities include segmenting clinical systems, minimizing privileged access, enforcing phishing-resistant multifactor authentication and monitoring unusual outbound data transfers. Patients and staff should also avoid engaging with anyone claiming responsibility for the attack. Restoring systems doesn’t eliminate the risk from information that may have been copied.
Review downtime procedures and identity controls now, especially privileged accounts and clinical network segmentation.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
