UNM Health Cyberattack Disrupts New Mexico's Only Level 1 Trauma Center, Diverts Patients
On October 26, 2026, the University of New Mexico Health System (UNM Health) suffered a cybersecurity incident that forced the diversion of ambulance traffic, cancellation of appointments at more than 30 clinics, suspension of outpatient surgeries, and closure of classes at its Health Sciences Center. The disruption temporarily left New Mexico without its only Level 1 trauma center, pushing extra strain onto nearby hospitals such as Presbyterian Healthcare Services and Lovelace Health System, which absorbed diverted patients. UNM said IT security teams detected the threat around 11 a.m., isolated affected end-user devices, and confirmed core systems and servers were not compromised. Systems began being restored the same afternoon, and operations returned to normal by the next day. The incident remains under criminal investigation; employees reported unverified claims that patient, student and staff data had been stolen, and UNM warned of potential phishing attempts exploiting the event.
Detalhes técnicos
UNM Health activated an Emergency Operations Center, engaged outside cybersecurity support, and notified state and federal law enforcement. The organization stated the threat affected end-user devices rather than core infrastructure or servers, and contained it within roughly 24 hours.
Remediação
UNM Health advised patients, students and staff to be alert for phishing and fraud attempts referencing the incident, pending confirmation of any data theft.
Linha do tempo
-
UNM Health Cyberattack Disrupts New Mexico's Only Level 1 Trauma Center, Diverts Patients
ler a análise desta fonte ocultar
On October 26, 2026, the University of New Mexico Health System (UNM Health) suffered a cybersecurity incident that forced the diversion of ambulance traffic, cancellation of appointments at more than 30 clinics, suspension of outpatient surgeries, and closure of classes at its Health Sciences Center. The disruption temporarily left New Mexico without its only Level 1 trauma center, pushing extra strain onto nearby hospitals such as Presbyterian Healthcare Services and Lovelace Health System, which absorbed diverted patients. UNM said IT security teams detected the threat around 11 a.m., isolated affected end-user devices, and confirmed core systems and servers were not compromised. Systems began being restored the same afternoon, and operations returned to normal by the next day. The incident remains under criminal investigation; employees reported unverified claims that patient, student and staff data had been stolen, and UNM warned of potential phishing attempts exploiting the event.
Technical Details
UNM Health activated an Emergency Operations Center, engaged outside cybersecurity support, and notified state and federal law enforcement. The organization stated the threat affected end-user devices rather than core infrastructure or servers, and contained it within roughly 24 hours.
Remediation
UNM Health advised patients, students and staff to be alert for phishing and fraud attempts referencing the incident, pending confirmation of any data theft.