The University of New Mexico Health System diverted ambulances and suspended outpatient care on October 26, 2026, after a cybersecurity incident affected its Health Sciences Center in Albuquerque. In a late-night update, UNM said its hospitals were open and clinics would resume scheduled appointments and procedures on October 27, while security teams continued working to resolve the event.

The disruption affected New Mexico’s only Level I trauma center. Associated Press reporting published by SecurityWeek said appointments at more than 30 clinics were canceled and neighboring Presbyterian and Lovelace health systems coordinated to accept additional patients.

Source New Mexico reported that an internal alert shortly after noon instructed Health Sciences Center users to shut down and unplug desktop computers and disconnect mobile devices from hospital Wi-Fi. The alert described a network security breach and said security teams were investigating, according to the outlet.

Employees told the Associated Press that messages played on computers claimed student, employee and patient information had been stolen. Those statements remain claims, rather than confirmed findings of data theft. UNM’s public update did not identify an entry vector, exploited vulnerability or malware family, and did not establish that ransomware was involved.

UNM said its security teams took containment measures, notified state and federal law enforcement and enlisted outside partners. An Emergency Operations Center coordinated the response. The university said it limited acceptance of new patients between 12:30 and 2:30 p.m. before beginning a phased restoration of operations and systems; outpatient surgeries and appointments remained suspended for the rest of Monday.

In its 10:27 p.m. update, UNM confirmed Tuesday clinic services would resume, but canceled classes at its four health sciences schools and told nonessential Health Sciences Center employees to stay home. Essential and clinical staff should report as usual. UNM said missed care would be rescheduled and that the active law enforcement investigation limited further disclosure.