SOCLYDE logo
Current languageEN
Cybersecurity newsHealthcareCyber incidentUnited States

UNM Health resumes operations after cyberattack

A cyberattack disrupted care and appointments at UNM Health in New Mexico. The health system said operations had returned to normal on October 28.

Published on

By Soclyde Team

Ambulance outside a hospital building in New Mexico

In summary

  • UNM Health reported operational disruption on October 26 and cancelled some appointments and classes.
  • The health system said operations were back to normal on October 28; its update said user devices were affected, not core systems.
  • A criminal group's claim about data has not been confirmed by the health system.

Explore next

Soclyde resources

Article contents

On October 26, a cyberattack disrupted operations at the University of New Mexico's health system, UNM Health. The organization cancelled clinical appointments and classes, while ambulances were diverted. On October 28, UNM Health said its operations had returned to normal.

Disruption to patient care

Patients were asked to check with their facility before travelling for appointments. Emergency care continued under local guidance, but the temporary ambulance diversion and cancelled appointments show how much healthcare services depend on digital systems.

UNM Health described a cybersecurity disruption and began an investigation with outside specialists. The published information does not establish ransomware, identify a responsible group, or confirm access to medical records.

What the health system confirmed

In its October 28 update, UNM Health said user devices were affected. It said its core systems and servers were not affected and operations had returned to normal. This is the organization's account at that point in time; an investigation can continue to develop.

A criminal group claimed responsibility and said it had obtained data. UNM Health has not confirmed that claim. A public allegation should be distinguished from verified exfiltration. The health system has not published a count of people affected or confirmed that patient data was stolen.

Why continuity of care matters

Hospitals need ways to keep essential care moving when workstations or administrative tools are unavailable. Paper procedures, backup communications and clear diversion rules can help reduce delays. These preparations do not replace technical response, but they help teams continue care during recovery.

The connection to Soclyde

A hospital incident is a reminder that accounts and access need careful management in every organization. Soclyde lets people keep unique passwords in local-first vaults, but it does not protect hospital systems or replace access controls, backups or a continuity plan. Read our guide to local versus cloud password storage.

Key points

UNM Health said it had returned to normal operations on October 28 after disruption to appointments and patient transport. The organization said its core systems were not affected. Claims of data theft remain unconfirmed.

Frequently asked questions

Were patient services disrupted at UNM Health?

Some appointments and classes were cancelled, and ambulances were diverted during the disruption. UNM Health later said operations had returned to normal.

Were the hospital's core systems compromised?

In its October 28 update, UNM Health said user devices were affected, but its core systems and servers were not.

Was patient data stolen?

The health system has not confirmed data theft. A criminal group's public claim does not establish that information was exfiltrated.

References

Sources and references

Need advice?

Design your password strategy with Soclyde

Schedule a dedicated walkthrough with the team to see how local-first security adapts to your stack.

Talk with us

Keep reading