Hospital cyberattack diverts ambulances and closes clinics
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Tuesday, October 27th, 2026.
Patient care was disrupted when a cyberattack hit the University of New Mexico Health Sciences Center. Ambulances were diverted, appointments across more than 30 clinics were canceled, and health sciences classes were called off. Hospitals later reopened, with systems and services returning in phases. An extortion group claimed extensive data theft, but those claims remain unconfirmed.
The disruption temporarily removed normal access to the emergency department at New Mexico’s only Level 1 trauma center. Neighboring health systems had to accept additional patients while security teams contained the incident. For leaders, this shows why cyber recovery plans must cover patient movement, public communication, and continuity of care, not just technology. For defenders, phased restoration needs to preserve evidence and avoid reconnecting systems before they’re trusted.
The broader lesson is that a healthcare cyber incident can quickly become a regional safety and capacity problem. Organizations should test clinical downtime, ambulance-diversion, communication, and phased-restoration plans before the next emergency.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
