Subscribe
Share
Share
Embed
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center. Patient care was disrupted after a cyberattack affected the University of New Mexico Health Sciences Center and the hospitals and clinics it operates.
Daily Cyber News: BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Patient care was disrupted after a cyberattack affected the University of New Mexico Health Sciences Center and the hospitals and clinics it operates. Ambulances were diverted for a time, outpatient surgeries and appointments were suspended, and medical classes were cancelled. A ransomware group claimed responsibility and alleged broad data theft, but the university hadn’t confirmed those claims.
Key context: Healthcare attacks can become safety and continuity events before anyone knows whether data was stolen.
Additional detail: Review downtime procedures and identity controls now, especially privileged accounts and clinical network segmentation.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, ransomware, phishing, New Mexico, BYOD, cyberattack, diverts, ambulances.
The BCM Daily Cyber News brings you clear, timely updates on threats, breaches, patches, and trends every day. Stay informed in minutes with focused audio built for busy professionals. Learn more and explore at BareMetalCyber.com.
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Friday, October 30th, 2026.
Patient care was disrupted after a cyberattack affected the University of New Mexico Health Sciences Center and the hospitals and clinics it operates. Ambulances were diverted for a time, outpatient surgeries and appointments were suspended, and medical classes were cancelled. A ransomware group claimed responsibility and alleged broad data theft, but the university hadn’t confirmed those claims. Classes later resumed, and clinical operations were reported as fully functional.
Healthcare attacks can become safety and continuity events before anyone knows whether data was stolen. For leaders, recovery planning needs to cover patient diversion, cancelled care, staff communication and possible long-term privacy risk. For defenders, the priorities include segmenting clinical systems, minimizing privileged access, enforcing phishing-resistant multifactor authentication and monitoring unusual outbound data transfers. Patients and staff should also avoid engaging with anyone claiming responsibility for the attack. Restoring systems doesn’t eliminate the risk from information that may have been copied.
Review downtime procedures and identity controls now, especially privileged accounts and clinical network segmentation.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.