LATEST, 10:30 a.m. Tuesday: A UNM Hospital doctor told the Daily Lobo their computer played the hackers’ message. UNM has said nothing new since 10:27 p.m. Monday, when it said UNM Hospital and Sandoval Regional are open. All clinics resume regular appointments and procedures Tuesday. Health Sciences classes are still canceled Tuesday. A ransomware gang called BYOD claims the hack. UNM hasn’t confirmed it.
Updated Oct. 27, 10:30 a.m.
A UNM Hospital doctor tells the Daily Lobo their computer did play the hackers' message. UNM still hasn't answered our emailed questions about what data was taken or if this is ransomware.
UNM: UNM Hospital and Sandoval Regional are open. All clinics resume regular appointments and procedures Tuesday. Health Sciences classes are canceled Tuesday; main and branch campus classes are not affected. Nonessential HSC staff stay home Tuesday.
UNM's full statement: it told state and federal police and is getting outside help. It limited new patients from 12:30 to 2:30 p.m. Hospital staff go back to work Tuesday. Missed appointments will be rescheduled. It says it can't share more during the police investigation.
Scanner: an ambulance crew tells a patient who asked for UNM that it is still on divert.
UNM: systems started coming back online in phases at 2:30 p.m. Health Sciences classes are canceled Tuesday, online ones too. An update on Tuesday's surgeries and appointments comes tonight or early Tuesday.
Scanner: dispatch tells a Rio Rancho rescue crew "UNM is still on divert."
A Reddit user who says they're an ICU doctor at UNM says computers are off, charts are on paper and imaging is for urgent cases. Unverified.
Claim, not confirmed: a ransomware gang called BYOD posts UNM on its leak site, ransomware.live shows. BYOD says it hit 36,000 computers and took data on every student and employee, including Social Security numbers. UNM hasn't confirmed any of it.
Scanner: dispatch repeats UNM Hospital is on divert "for a cyber-related incident." Heart attack, stroke, trauma, OB and pediatric cases are exceptions.
UNM: the threat affects the entire Health Sciences Center. All students and non-essential staff should leave campus.
LoboAlert: the Health Sciences Center is closed for the rest of Monday, citing a "tech-related issue."
Scanner: UNMH is not accepting patients until further notice.
Reddit users say a message claimed, "We have all your student and employees data." Unconfirmed.
KOB reporter posts a partial recording of the message on TikTok. It says "We have all of your student and employees' data" and "contact us on session." UNM hasn't confirmed it. Hear it below.
UNM Health: "cybersecurity issue." Clinics canceled.
Scanner: UNMH and Sandoval Regional take no ambulances for 2+ hours.
Reddit: "I saw this season already." People compare it to The Pitt.
Staff alert: a "network security breach." Employees told to turn off and unplug all desktops, turn off Wi-Fi on phones and use paper forms.
Status
- HospitalsOpenUNMH and Sandoval Regional, UNM says, 10:27 p.m.
- ClinicsOpen TuesdayRegular appointments and procedures
- Health Sciences classesCanceledTuesday, online ones too
Source: UNM Health, fire dispatch radio. Last checked 10:30 a.m. Tuesday.
Not yet known
- If BYOD’s claim is true. It is the gang’s word only. UNM calls it a “cybersecurity issue” and hasn’t named anyone.
- If patient information was taken.
Read more
- UNM has been hit before: at least 10 data breaches since 2010. Once, it paid the ransom.
- BYOD’s listing on ransomware.live, a site that tracks ransomware gangs. We don’t link the gang’s own site.
- UNM’s full statement and its 6:08 p.m. update.
- UNM Health’s statement and KOB’s report on the message. The Daily Lobo on the doctor whose computer played it.
- Our recording of the dispatch calls. Sandoval Regional is UNM’s Rio Rancho hospital. UNMH is New Mexico’s only Level I trauma center.
- Reddit users: r/unm, r/Albuquerque.
- The Pitt: The Ringer on the ransomware episode.
What do you think?
Comments are closed on this story.
Free, no password. Comments are the commenter's own words. Comment rules