Threat actor claims 36,000-system compromise at UNM Health, HSC says it did not pay a ransom
Event summary
An independent security report quotes the threat actor saying it "had compromised 36,000 systems across UNM's main campus and hospital environments." Separately, UNM HSC said it did not pay a ransom to the hackers. The scope of any confirmed compromise or data exfiltration remains unverified in the public reporting cited.
CHRONOS Wire · October 29 · Alert 8
Publication details
- Published
- Updated
- Revision
- r1
- Source
- The Record (Recorded Future)
Cliff Notes
- Threat actor claims 36,000-system compromise; UNM HSC says it did not pay ransom; extent of compromise unconfirmed.
U.S. Impact
U.S. Impact assessment pending.
ELI5: Plain-English Explanation
A ransomware incident hit UNM Health. An independent report says the attacker claimed to have compromised 36,000 systems. UNM HSC told reporters it did not pay a ransom.
Why Urgent Level 3
Healthcare cybersecurity incidents can affect patient care and privacy; verify scope and watch for breach notices or operational impacts in the next 24–72 hours.
What Changed
Independent reporting surfaced a claim that the threat actor said it compromised 36,000 systems. UNM HSC told reporters it did not pay a ransom.
What Is Genuinely New
Independent reporting asserts the threat actor claimed to have compromised 36,000 systems. UNM HSC stated it did not pay a ransom.
CHRONOS Bottom Line
Independent reporting claims 36,000 systems were compromised. UNM HSC says it did not pay a ransom; the scope of any actual compromise and data theft remains unconfirmed.
Uncertainties / Known Unknowns
Whether the claim of 36,000 compromised systems reflects verified compromise, what data (if any) were exfiltrated, and the full operational impact remain unconfirmed by UNM or forensic reports.
Detailed Analysis
BleepingComputer reported that the threat actor claimed to have compromised 36,000 systems across UNM's main campus and hospital environments. The Record cites an HSC statement that the organization did not pay a ransom. At present, public reporting combines the threat actor claim and the HSC denial of ransom payment; independent verification of the actor's scope and any data exfiltration has not been published in the cited sources.
Sources / Evidence
- 01University of New Mexico restores hospital systems, urges no contact with hackersThe Record (Recorded Future)2026-10-28
- 02UNM Health ransomware attack disrupts patient care, surgeriesBleeping Computer2026-10-27
Follow CHRONOS ALERTS
Published alerts also appear on Instagram and Threads as @chronosalerts.