Ransomware Gang BYOD Disrupts UNM Health Sciences Center, Forces Hospital System Shutdown

O que aconteceu

On Monday, the BYOD ransomware gang attacked the University of New Mexico’s Health Sciences Center, disabling clinical and administrative systems. Ambulances were diverted, outpatient surgeries and medical‑school classes were cancelled, and the attackers claimed to have stolen patient and employee data, threatening its destruction if victims engaged with them. UNM restored all systems by Wednesday without paying a ransom and warned the community to ignore any hacker communications.

Por que isso importa para confiança e conformidade

• The event demonstrates the critical need for documented incident‑response procedures and ongoing security‑awareness programs that address ransomware‑related social‑engineering risks.
• Validate that incident‑response controls are documented, tested, and can produce defensible evidence for audits.
• Leverage continuous security‑awareness metrics to demonstrate control effectiveness across frameworks.

Who is affected

Recommended actions

1. Review and tabletop‑test your incident‑response plan against ransomware scenarios.
2. Ensure immutable, offline backups are regularly verified.
3. Refresh security‑awareness training to cover ransomware‑related phishing and extortion tactics.