2026 UNM Health — cyberattack on end-user devices shuts systems, forces ambulance diversion and cancels surgeries and clinics
Data compromised
None confirmed. Officials say a review of patient data is pending. A group calling itself BYOD has claimed to hold Social Security numbers, payroll and patient records; those claims are unverified.
Technical writeup
Included as a company-confirmed cyberattack with operational impact. Data theft and ransomware are not confirmed by UNM. The UNM release was not fetched; details come from the Albuquerque Journal's quotes of it.
Root cause
UNM Health says it experienced a cybersecurity incident on October 26, 2026. Systems were shut down, which led to ambulance diversion and cancelled surgeries, clinics and classes. The company says some end-user devices were affected but core systems and servers were not penetrated.