By Tilly Robinson
Albuquerque Journal
ALBUQUERQUE — The University of New Mexico Health Sciences Center has not made concessions to hackers following Monday’s cyberattack, health system officials said Wednesday.
The announcement came after Byod, a ransomware group, claimed responsibility for the attack. The cybersecurity news site BleepingComputer reported Tuesday that Byod said it had compromised 36,000 systems belonging to UNM’s hospitals and main campus.
| THE PULSE: Medics cite staffing, leading from the front as signs of healthy leadership
Byod said in a post to its data leak site that it had access to students’ and employees’ personal data, including Social Security numbers, payroll records and internal emails, according to BleepingComputer. The hacker group also said it accessed patient information and hospital appointment data.
UNM Health officials urged skepticism of Byod’s claims. The hospital system said in a news release Tuesday that technicians determined the attack “affected some end-user devices but did not penetrate core systems or servers.”
UNM Health spokesperson Chris Ramirez stood by the system’s findings, writing in an email Wednesday that “the information we’ve put out, as we’ve stated it, is factual and accurate despite what other groups may be claiming.”
But Ramirez told reporters at a news conference later Wednesday that the health system is still waiting to hear whether patient data was compromised. The FBI is conducting a forensic analysis of the incident as part of an ongoing criminal investigation, Ramirez said.
“When we complete a very thorough forensic analysis, we’ll have those answers,” Ramirez said. “I respect that those are the questions that people have right now, but we’re not in a position to be able to definitively make a comment until we have the final results of the forensic analysis.”
Ramirez said some UNM Health employees are still being asked not to turn on their computers, adding that some personal and workplace devices have been affected.
Earlier Wednesday, UNM Health officials warned patients, employees, students and the public not to engage with entities claiming responsibility for the attack.
“Following a cybersecurity incident, those responsible may attempt to exploit individuals through additional scams, including false offers of payments or compensation,” officials said in a news release. “Do not click links, open attachments, download files or provide personal or financial information.”
Interactions with hackers could expose UNM Health affiliates and the public to identity theft or fraud, officials warned.
The Wednesday news release recommended using strong passwords, turning on multifactor authentication, keeping devices updated, and being wary of unexpected links. UNM Health officials suggested verifying requests for money or information by visiting organizations’ official websites or calling their phone number, rather than using links sent via email or messaging.
Anyone who receives a message from a group claiming responsibility for the cyberattack should contact the FBI’s Internet Crime Complaint Center at IC3.gov or by phone at 1-800-CALL-FBI, the news release said.
The cyberattack, discovered Monday morning, forced UNM Health to cancel all scheduled appointments and outpatient surgeries that day. Ambulances were diverted to other hospitals for a two-hour window on Monday, and classes were canceled at the UNM School of Medicine, College of Nursing, College of Pharmacy and College of Population Health through Tuesday.
According to BleepingComputer, Byod said it would take down the post on its data leak site after UNM Health initiated communication.
Ramirez declined to comment on whether UNM Health had interacted with Byod. He also declined to comment on whether UNM Health was aware of any messages from Byod to patients, students or employees.
© 2026 the Albuquerque Journal (Albuquerque, N.M.).
Visit www.abqjournal.com.
Distributed by Tribune Content Agency, LLC.