Back to Feed
BreachesOct 27, 2026

Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack

University of New Mexico cancels classes for second day due to cybersecurity event impacting Health Sciences Center.

The University of New Mexico has canceled classes for a second day following a cybersecurity event that targeted its Health Sciences Center. The attack forced the shutdown of systems, cancellation of appointments, and diversion of ambulances from UNM Health hospitals. While hospital operations are returning to normal, the university is still working on recovery, and non-essential staff are advised to stay home.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Oracle databases?

Get an email when a new story names Oracle databases, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

A cyberattack targeting the University of New Mexico's Health Sciences Center caused cascading disruptions, including canceled classes, suspended appointments, and ambulance diversions — hallmarks of inadequate network segmentation between administrative, academic, and clinical systems. When a single attack can simultaneously disable university operations and divert emergency medical care, it signals that critical healthcare infrastructure was not sufficiently isolated from broader institutional networks. The multi-day recovery period further suggests incident response plans were either absent, untested, or insufficiently resourced for a healthcare environment. This incident matters because lives can be endangered when hospital operations are disrupted, making healthcare cybersecurity a patient safety issue, not merely an IT concern.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — PHP2Shell

Entities

BYOD (threat_actor)EndZone (threat_actor)Oracle databases (product)Active Directory (technology)