Patient care resumes after cyberattack disrupts New Mexico health system
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Wednesday, October 28th, 2026.
Patient care and teaching were interrupted after a cyberattack hit the University of New Mexico Health Sciences Center. UNM temporarily diverted ambulances, limited admissions, suspended outpatient procedures and canceled classes. The organization later said its critical electronic systems were back online and its hospitals were fully open. Its assessment found that some end-user devices were affected, but core systems and servers were not penetrated. A ransomware group made sweeping claims about system compromise and stolen data, but those claims remain unverified.
The disruption affected a statewide provider with more than 1 million patient visits annually and New Mexico’s only Level I trauma center. For leaders, the immediate concern was continuity of care, regardless of the incident’s still-unclear cause and scope. For defenders, rapid containment and outside support helped recovery, but patients, staff and students could still receive phishing or other unsolicited messages tied to the event. The broader lesson is that operational harm can be real before breach claims are proven. Maintain clinical downtime plans, validate the recovered environment and investigate follow-on phishing.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.