All incidents

On October 26 the University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages. UNM Health limited new admissions, diverted ambulances and suspended outpatient surgeries and appointments, and classes at its health schools were cancelled. By October 27 UNM said its critical systems were back online and clinics had resumed. It said the event affected some end-user devices but did not reach core systems or servers, and it has not said what kind of attack it was. A group calling itself Byod, which posts on a leak site, claimed the attack and says it compromised about 36,000 machines and holds Social Security numbers, payroll, student and patient records, and internal emails. Those claims are unverified, and it is not clear whether ransomware was used. UNM says it has made no concessions to the group, and the FBI is running a forensic analysis as part of a criminal investigation. UNM had not confirmed any data theft as of October 28 and says the FBI's forensic review will show whether patient data was exposed. The group also says it will provide free decryption keys to healthcare facilities, and that it will keep the stolen data.