--- title: Day 2 of canceled classes at University of New Mexico... description: The University of New Mexico is canceling classes for a second day after a cyberattack hit its Health Sciences Center on Monday, Oct. 26, 2026. The attack shut... canonical: https://daily.dev/posts/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack-9d18dicum twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack | daily.dev og:description: The University of New Mexico is canceling classes for a second day after a cyberattack hit its Health Sciences Center on Monday, Oct. 26, 2026. The attack shut... og:url: https://daily.dev/posts/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack-9d18dicum og:image: https://api.daily.dev/og/posts/9D18DiCUm.png og:image:alt: Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack **[The Register](https://daily.dev/sources/theregister)** · 3 min read · 0 upvotes · 0 comments ## Summary The University of New Mexico is canceling classes for a second day after a cyberattack hit its Health Sciences Center on Monday, Oct. 26, 2026. The attack shut down systems, canceled clinics and appointments, and diverted ambulances to hospitals in Albuquerque and Santa Fe. Clinics have now returned to normal, but nonessential staff are still being asked to stay home. A ransomware group calling itself BYOD claimed responsibility, alleging it compromised 36,000 machines, both Active Directory forests, two Oracle databases, and personal data for every student and employee. The university has not confirmed the nature of the attack, and BYOD's claims are unverified, though the same group's earlier claimed breach of Trump Mobile's customer data has held up. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What happened in the University of New Mexico Health Sciences Center cyberattack? A cybersecurity event hit UNM's Health Sciences Center on October 26, 2026, forcing it to shut down systems, cancel clinics and appointments, and divert ambulances to hospitals in Albuquerque and Santa Fe. Classes across medicine, nursing, and pharmacy were canceled for a second day. A ransomware group called BYOD claimed responsibility, alleging it stole data for every student and employee, though the university has not confirmed the claim. _Follow daily.dev for updates on how healthcare and university networks respond to ransomware incidents._ ### What did the BYOD ransomware group claim to have stolen from UNM? BYOD claimed to have compromised 36,000 machines, both Active Directory forests, two Oracle databases, personal data belonging to every student and employee, internal emails, and data from other systems. These claims are unverified since a cybercriminal group's word is never fully trustworthy, though the university has not disputed the specifics publicly. _Developers tracking ransomware claims against their own stack can follow breach reporting on daily.dev._ ### Is the BYOD ransomware group a credible new threat? BYOD is a newly assembled ransomware group whose claims should be treated cautiously, since taking credit for an attack does not prove responsibility or that ransomware was deployed. Its claimed breach of Trump Mobile's customer database, affecting all 3,615 customers, has held up, lending some credibility to its other claims, including the UNM attack. _Security teams evaluating emerging ransomware actors can track verified incidents on daily.dev._ ## Similar posts on daily.dev - [One of Europe’s largest universities knocked offline for days after cyberattack](https://daily.dev/posts/one-of-europe-s-largest-universities-knocked-offline-for-days-after-cyberattack-wsixvo7xj) · TechCrunch · 0 upvotes · 0 comments - [Belgian hospitals refuse ambulances following cyberattack](https://daily.dev/posts/belgian-hospitals-refuse-ambulances-following-cyberattack-xg9ubiux4) · The Register · 2 upvotes · 0 comments - [Mount Royal University confirms breach as hackers claim attack](https://daily.dev/posts/mount-royal-university-confirms-breach-as-hackers-claim-attack-avf1w3ar3) · BleepingComputer · 0 upvotes · 0 comments - [Warwickshire school to reopen after cyberattack crippled IT](https://daily.dev/posts/warwickshire-school-to-reopen-after-cyberattack-crippled-it-qaek4qe0z) · The Register · 0 upvotes · 0 comments --- Tags: [#ransomware](https://daily.dev/tags/ransomware), [#healthcare](https://daily.dev/tags/healthcare), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack-9d18dicum) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack","url":"https://daily.dev/posts/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack-9d18dicum","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack-9d18dicum"},"datePublished":"2026-10-27T16:16:12.593Z","dateModified":"2026-10-27T16:52:34.667Z","description":"The University of New Mexico is canceling classes for a second day after a cyberattack hit its Health Sciences Center on Monday, Oct. 26, 2026. The attack shut...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/af6e6794056a1e130597452b7673affb?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/af6e6794056a1e130597452b7673affb?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack-9d18dicum","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ransomware,healthcare,data-breach","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/day-2-of-canceled-classes-at-university-of-new-mexico-after-health-sciences-center-cyberattack-9d18dicum#faq","mainEntity":[{"@type":"Question","name":"What happened in the University of New Mexico Health Sciences Center cyberattack?","acceptedAnswer":{"@type":"Answer","text":"A cybersecurity event hit UNM's Health Sciences Center on October 26, 2026, forcing it to shut down systems, cancel clinics and appointments, and divert ambulances to hospitals in Albuquerque and Santa Fe. Classes across medicine, nursing, and pharmacy were canceled for a second day. A ransomware group called BYOD claimed responsibility, alleging it stole data for every student and employee, though the university has not confirmed the claim. Follow daily.dev for updates on how healthcare and university networks respond to ransomware incidents."}},{"@type":"Question","name":"What did the BYOD ransomware group claim to have stolen from UNM?","acceptedAnswer":{"@type":"Answer","text":"BYOD claimed to have compromised 36,000 machines, both Active Directory forests, two Oracle databases, personal data belonging to every student and employee, internal emails, and data from other systems. These claims are unverified since a cybercriminal group's word is never fully trustworthy, though the university has not disputed the specifics publicly. Developers tracking ransomware claims against their own stack can follow breach reporting on daily.dev."}},{"@type":"Question","name":"Is the BYOD ransomware group a credible new threat?","acceptedAnswer":{"@type":"Answer","text":"BYOD is a newly assembled ransomware group whose claims should be treated cautiously, since taking credit for an attack does not prove responsibility or that ransomware was deployed. Its claimed breach of Trump Mobile's customer database, affecting all 3,615 customers, has held up, lending some credibility to its other claims, including the UNM attack. Security teams evaluating emerging ransomware actors can track verified incidents on daily.dev."}}]} ```