Back to all incidents

University of New Mexico

universityofnewmexico.com
ACKNOWLEDGED

University of New Mexico was listed on the BYOD ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Observable Status ACKNOWLEDGED
Industry / Sector Education
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor BYOD
Affected Population Scope Under Audit
First Seen 2026-10-26
Last Updated 2026-10-29
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

64% CONFIDENCE
1. Primary Authority INDEPENDENT VERIFICATION Base weight: 32%
2. Evidence Specificity +7% Domain & Scope Telemetry
3. Corroboration Curve +20% 7 independent domains
4. Timeline & Staleness +5% 9 milestones logged
Corroborated Source Domains:
ransomware.live therecord.media theregister.com infosecurity-magazine.com helpnetsecurity.com databreaches.net bleepingcomputer.com

Technical Forensic Briefing

Incident Overview

University of New Mexico, operating within the Education sector, has been subject to a cybersecurity incident. Ground-truth telemetry indicates the threat activity is attributed to threat actor BYOD.

University of New Mexico was listed on the BYOD ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include universityofnewmexico.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (9 events logged)

2026-10-26 20:52 UTC
UNVERIFIED CLAIM

University of New Mexico Listed on BYOD Ransomware Extortion Portal

2026-10-27 14:57 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: University of New Mexico hospital diverts ambulances after cyberattack

2026-10-27 16:15 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack

2026-10-27 16:45 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances

2026-10-27 12:24 UTC
Media Pickup UNVERIFIED CLAIM

Press Coverage: Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack

2026-10-27 18:49 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Cyberattack forces University of New Mexico Health to divert ambulances, cancel appointments

2026-10-27 22:07 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: UNM Health ransomware attack disrupts patient care, surgeries

2026-10-29 13:30 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: University of New Mexico restores hospital systems, urges no contact with hackers

2026-10-29 20:10 UTC
Media Pickup UNVERIFIED CLAIM

Press Coverage: UNM Health addresses cyberattack in New Mexico after ransomware group claims responsibility

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub