Abqjournal Cyberattack Disrupts UNM Health Services, Diverts Ambulances
Article Content
- •UNM Health experienced a significant cyberattack on October 26, 2026.
- •All appointments and classes were canceled, and ambulances were diverted to other hospitals.
- •The attack included a threatening message broadcast to hospital staff's computers.
On October 26, 2026, the University of New Mexico Health Sciences Center experienced a significant cybersecurity incident that led to the cancellation of all appointments and the diversion of ambulance traffic to other hospitals. The attack affected the entire UNM Health system, prompting the cancellation of classes at the School of Medicine, College of Pharmacy, College of Nursing, and College of Population Health. Hospital officials reported that the IT team took immediate steps to contain the incident and notified law enforcement. During the incident, a message was reportedly broadcast to hospital workers' computers, threatening to compromise sensitive data. By 2:30 p.m., operations began to resume in phases as systems were brought back online. Classes and outpatient services were canceled for the following day, October 27, 2026. The full scope of the attack and the specific attack vector remain under investigation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Lovelace Health System in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What services were affected by the cyberattack?
Is patient data at risk due to this incident?
What steps is UNM Health taking in response?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…