The University of New Mexico Health Sciences Center disclosed a cyberattack that forced its flagship UNM Hospital — New Mexico's only Level I trauma centre — to limit new admissions, divert ambulances and suspend outpatient surgeries, with classes at its four health sciences schools cancelled on Tuesday and non-essential staff told to stay home. UNM Hospital and Sandoval Regional Medical Center remained open and clinics resumed scheduled appointments on 27 October. UNM has not named the type of attack, but a new ransomware group calling itself Byod claimed it, alleging compromise of 36,000 systems across campus and hospital networks, including Active Directory forests, Group Policy infrastructure, the entire Microsoft Entra tenant and two Oracle databases, with claimed access to SSNs, HR/payroll, Banner student records, research data and Cerner EHR rosters — none independently verified. The group then posted that it would give free decryption keys for healthcare facilities and pay up to $2,500 per affected patient, an unusual gambit that reads as pressure marketing rather than charity.

• Source article