Summary
- Environment: UNM Health Sciences end-user devices and clinical operations
- Operational impact: Ambulance diversions, canceled care and classes; critical clinical systems restored
- Financial impact: No incident cost established in the reviewed evidence
- Record status: Developing record. Reviewed October 28, 2026; updated as evidence emerges.
What happened
The University of New Mexico began containing a cybersecurity threat at its Health Sciences Center on October 26, 2026. Its official update says some end-user devices were affected, while core systems and servers were not penetrated in its assessment. [1]
Impact
Ambulances were diverted from 12:30 to 2:30 p.m. local time October 26, and outpatient surgeries and appointments were suspended for the rest of that day. By October 27, critical systems, normal ambulance traffic and scheduled clinical care were restored. Four Health Sciences schools still canceled classes that Tuesday; central and branch-campus classes were unaffected. [1]
Timeline
Containment and clinical disruption
Containment began around 11 a.m.; phased restoration started at 2:30 p.m.
[1]Critical clinical systems restored
The university reported restored clinical operations, with academic disruption continuing.
[1]Briefing updated
This briefing was last reviewed and updated on October 28, 2026.
Threat Group & Attack Vector
The official notice does not establish ransomware, data theft, an entry vector or an affected-person count. [1]
Actors
- No threat actor group has been identified in the reviewed authoritative evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
UNM activated its Emergency Operations Center, engaged external partners and notified law enforcement. Rescheduling care and the criminal investigation continued. Academic and research operations were expected to resume October 28; the reviewed notice does not confirm that happened. [1]