A cybersecurity event at the University of New Mexico Health Sciences Center disrupted patient care, academic operations, and access to electronic systems on October 26. UNM later reported that clinical operations were fully functional again by October 28.
What is confirmed
UNM said its security teams began containment after identifying a threat around 11 a.m. The event affected some end-user devices but, according to the university's assessment, did not penetrate core systems or servers. State and federal law enforcement were notified, and external partners assisted with the response.
During the disruption, UNM temporarily diverted ambulance traffic, suspended outpatient surgeries and appointments, canceled Health Sciences classes, and asked nonessential employees to remain home. Systems were restored in phases after teams determined it was safe to proceed.
What remains unknown
The incident remains under criminal investigation. UNM has not publicly identified the responsible actor, the initial-access method, or whether personal information was accessed. Claims made by outside groups should not be treated as confirmed evidence.
Why it matters
Healthcare cyber resilience is measured in care continuity as well as technical containment. Even when core servers are protected, loss of endpoint or application availability can change where ambulances go, delay procedures, and force staff into downtime workflows.
What healthcare organizations should do
- Exercise downtime plans for ambulance intake, scheduling, medication workflows, laboratory results, and clinical communications.
- Segment endpoints and critical systems so containment can be decisive without unnecessarily stopping every service.
- Plan phased restoration with clinical leadership, not only IT, and define the evidence required before reconnecting systems.
- Warn patients and staff about follow-on scams that impersonate the victim organization or offer false compensation.
Panther Note
Strong containment can limit technical penetration while the organization still experiences real operational harm. Both outcomes belong in the incident report.
Primary source: UNM Health Sciences incident updates, October 26-28, 2026.