Ce qui s’est passé
On 26 Oct 2024 the University of New Mexico Health Sciences Center reported a cybersecurity event that shut down desktops and Wi‑Fi across its hospitals and clinics. The BYOD ransomware group claimed to have compromised tens of thousands of computers and stolen personal details—including Social Security numbers—of every student and employee. Ambulances were rerouted, outpatient surgeries and appointments were suspended, and classes were cancelled. BYOD posted a ransom note offering free decryption keys for the hospital segment while demanding $2,500 per patient. UNM did not negotiate, restored clinical operations by Wednesday, but the data breach remains unverified.
Pourquoi c’est important pour la confiance et la conformité
- The incident tests the effectiveness of incident‑response, backup integrity, and network‑segmentation controls that map to audit‑ready evidence across frameworks.
- Validate ransomware response procedures and backup immutability to satisfy incident‑response control objectives.
- Document network segmentation and MFA enforcement as evidence for data‑protection and continuity controls.
Who is affected
Higher‑education health providers University IT and clinical operations
Recommended actions
- Test and update your ransomware response playbook, including stakeholder communication.
- Ensure backups are immutable, regularly restored, and stored offline.
- Enforce MFA for all privileged and remote‑access accounts.
- Segment clinical networks from academic/administrative zones.
- Collect and retain remediation evidence for audit readiness.