新墨西哥大学连续第二天取消医学院、护理学院和药学院的课程，同时仍在继续努力从一起“网络安全事件”中恢复。校方透露，此次攻击于周一针对健康科学中心发动，迫使其关闭系统、取消新墨西哥大学健康旗下医院的预约和门诊，并将救护车分流至附近阿尔伯克基和圣菲的医疗机构。医院预约和门诊今天恢复正常，但非必要的新墨西哥大学健康科学中心员工被要求留在家中。
The University of New Mexico is canceling classes across the medicine, nursing, and pharmacy faculties for a second day amid continued efforts to recover from a "cybersecurity event." The attack targeted the Health Sciences Center on Monday, the Uni revealed, forcing it to shut down systems, cancel appointments and clinics at UNM Health hospitals, and divert ambulances to healthcare facilities in nearby Albuquerque and Santa Fe. Hospital appointments and clinics return to normal today, although nonessential UNM Health Sciences Center staff are being asked to remain at home.
“新墨西哥大学健康科学中心（HSC），包括新墨西哥大学健康临床服务系统，于2026年10月26日周一遭遇了一起网络安全事件，”该校在周一晚间的一份声明中表示。“HSC信息技术安全团队立即采取措施遏制该事件并保护网络。他们还通知了州和联邦执法部门，并聘请外部合作伙伴协助调查。
"The University of New Mexico Health Sciences Center (HSC), which includes the UNM Health clinical delivery system, experienced a cybersecurity event Monday, Oct. 26, 2026," the university said in a statement on Monday evening. "HSC information technology security teams immediately took steps to contain the event and protect the network. They also notified state and federal law enforcement and engaged external partners to assist with the investigation.
“领导层启动了应急行动中心，以协调应对工作，并为HSC员工、学生和新墨西哥大学健康系统一线医护人员提供指导。”该校于当地时间14时30分宣布了此次攻击，立即取消了所有剩余的门诊和课程，除关键岗位和临床人员外要求所有人离开，并敦促患者不要前往HSC设施。该校尚未就此次网络攻击的性质发表评论，但这并未阻止研究人员对勒索软件是否参与的猜测。
"Leadership activated an Emergency Operations Center to coordinate the response and provide guidance to HSC employees, students, and UNM Health system frontline providers." The university announced the attack at 1430 local time, immediately cancelling all remaining clinics and classes, dismissing everyone other than critical and clinical staff, and urging patients not to attend HSC facilities. It has not commented on the nature of the cyberattack, although that hasn’t stopped researchers from speculating about ransomware’s involvement.
周一晚些时候，新组建的BYOD勒索软件组织声称对此次攻击负责，这进一步助长了相关传言。需要注意的是，仅仅因为一个自称勒索软件组织的团体声称对攻击负责，并不意味着他们真的是幕后黑手，也不意味着他们在攻击中部署了勒索软件/加密载荷。
Rumors were fuelled by the newly assembled BYOD ransomware group claiming responsibility for the attack on Monday afternoon. It's important to note that just because a purported ransomware group took credit for the attack, it does not mean they actually were responsible, nor does it mean they deployed a ransomware/locker payload as part of the attack.
然而，该组织对这次数字入侵的说法是，它攻陷了3.6万台机器、“两个[Active Directory]林”、两个Oracle数据库、每名学生和员工的个人数据，以及其他系统的内部邮件和数据。正如《The Register》的读者所知，网络犯罪分子的说辞从来都不可信。不过，BYOD关于入侵特朗普移动客户数据库的说法似乎站得住脚。
However, the group's take on the digital raid is that it compromised 36,000 machines, "both [Active Directory] forests," two Oracle databases, the personal data belonging to every student and employee, as well as internal emails and data from other systems. As Reg readers know, a cybercriminal's word is never one to be trusted. Yet BYOD's claims about breaching Trump Mobile's customer database appear to have held up It was a bold debut, even for a ransomware crew: BYOD’s first named victim was the US president's smartphone biz, with data allegedly leaked for all 3,615 customers.
即便对一个勒索软件团伙来说，这也是一次大胆的亮相：BYOD首个公开点名的受害者是美国总统的手机公司，据称全部3615名客户的数据遭到泄露。一周前，竞争对手团伙EndZone声称实施了类似的入侵，一些专家认为这两个团伙可能是同一个。今年5月，特朗普移动被发现通过一个防护薄弱的网站泄露了数千人的数据。
A rival group, EndZone, claimed a similar breach a week earlier, and some experts suggested the two could be one and the same. In May, the Trump Mobile was found leaking thousands of people's data via a poorly secured website.
在上述两起事件中，特朗普集团均未回应我们索取更多信息的请求。新墨西哥大学的一位发言人拒绝回答我们的进一步提问，只是让我们参考其公开声明。®
The Trump Organization did not respond to our requests for more information in either of these cases. A UNM spokesperson declined to answer our additional questions, directing us back to its public statement. ®