UNM Health ransomware attack disrupts patient care and surgeries
Original title: UNM Health ransomware attack disrupts patient care, surgeries
The Byod gang claims it stole patient and employee data from 36,000 systems; UNM says core systems were not breached.
The University of New Mexico Health Sciences Center disclosed a cyberattack that limited admissions, diverted ambulances, and suspended outpatient surgeries. UNM did not name the attacker, but the new Byod ransomware group claimed the incident and said it would keep stolen data while offering healthcare decrypt keys. By Tuesday, October 27, UNM said hospitals and clinics had resumed and that only some end-user devices were affected.
Unconfirmed: Byod's system counts and data-theft claims are unverified; UNM has not confirmed them.
- Byod claims access to 36,000 systems, Active Directory, Entra, and two Oracle databases.
- The gang also claims SSNs, payroll, student records, emails, and Cerner data.
- UNM says some end-user devices were hit but not core systems or servers.
- Hospitals reopened October 27; health-sciences classes were canceled that day.
- Byod lists six victims and says it will retain the stolen data.
Impact: Care disruption and claimed theft of patient and employee data
- 1.Watch for unsolicited communications and phishing aimed at patients, staff, and students
- Threat actors
- Byod
- Countries
- United States
From the original article
3 min read at bleepingcomputer.com
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.