Summary
On Monday, October 26, 2026, the University of New Mexico Health System reported a "cybersecurity issue" that forced it to divert ambulances and cancel appointments across the system. The cause and full extent were still unclear at the time of reporting.
What We Know
- Ambulance diversion: UNM Hospital is New Mexico's only Level I trauma center, so diversion left the state without one for the most serious injuries.
- Clinics: All appointments at more than 30 UNM Health System clinics, including Sandoval Regional Medical Center, were canceled Monday.
- Patient guidance: Emergencies should go through 911; non-emergency care should be delayed until further notice.
- Education: In-person and virtual classes at the School of Medicine, College of Pharmacy, College of Nursing and College of Population Health were canceled through Tuesday. Students and nonessential staff were sent home.
- Scope: A UNM spokesperson said the threat is not university-wide and affects only the Health Sciences Center.
- Internal response: Shortly after noon, users received a "network security breach" alert telling them to power off and unplug desktops and disconnect mobile devices from hospital Wi-Fi. An emergency operations center was opened.
What We Don't Know
No details on the nature of the attack, data exposure, or a reopening timeline have been released. KOB 4 reported that alleged hackers broadcast a message to workstations, but that detail is unconfirmed.
Takeaways
Rapid isolation (power-off directives, Wi-Fi disconnects) is a standard containment step but causes immediate clinical impact. Healthcare organizations should rehearse downtime procedures, keep offline copies of critical patient information, and pre-plan diversion with regional partners.