University of New Mexico Health Sciences Center hit by cyberattack, classes and clinics disrupted
- Severity
- High
- Sources
- 2
What happened
UNM HSC disclosed a 'cybersecurity event' on 26 October 2026 and contained it by taking systems offline, notifying state and federal law enforcement and engaging external investigators. The university has not confirmed the attack type or any ransomware deployment. The newly formed BYOD ransomware group claimed responsibility, alleging compromise of 36,000 machines, both Active Directory forests, two Oracle databases, personal data on every student and employee, and internal emails. These claims are unverified. The articles give no CVEs, affected versions or indicators of compromise, so no specific defender actions are stated. BYOD's earlier claim against Trump Mobile (3,615 customers) appears to have held up, and some experts suggest links between BYOD and EndZone, though this is speculation.
For security analysts · Written by AI from 2 sources · Wrong?
What to do
- If you look after an organisation’s systems, check that backups are kept offline and that restoring them has been tested.
General advice for this kind of story
Full story timeline · 2 updates
Who reported · 2 outlets
Who and what is in it
Companies
Products