Baylor Genetics Data Breach Investigation
Chimicles Schwartz Kriner & Donaldson-Smith LLP is investigating potential class action claims arising from a cybersecurity incident affecting the University of New Mexico Health System (“UNM Health”) following reports that unauthorized parties may have obtained sensitive information belonging to patients, employees, and students.
UNM Health is an Albuquerque, New Mexico-based academic health system that includes UNM Hospital, Sandoval Regional Medical Center, and outpatient clinics. The health system operates New Mexico’s only Level I trauma center.
What Happened at UNM Health?
On October 26, 2026, the UNM Health experienced a cybersecurity incident that disrupted clinical services and academic operations. UNM reported that system outages forced it to divert ambulance traffic, suspend outpatient surgeries, and cancel clinic
appointments.
UNM Health stated that its information technology security teams took steps to contain the incident and protect its network. It also notified state and federal law enforcement and engaged external partners to assist with its investigation.
According to published reports, a cybercriminal group identifying itself as BYOD claimed responsibility for the incident and alleged that it obtained sensitive patient, employee, and student information. Employees also reportedly encountered messages on their computers claiming that information had been stolen.
UNM Health subsequently announced that its hospitals were open and that regularly scheduled clinic appointments and procedures would resume on October 27. However, the investigation remained ongoing.
What Information May Have Been Involved?
Published reports describe claims by the alleged attackers that the compromised information includes:
- Personal identifying information, including Social Security numbers;
- Employee human resources and payroll records;
- Student records;
- Patient information associated with electronic health record rosters;
- Internal emails and research information.
UNM Health has not publicly confirmed these claims, identified the specific information accessed or acquired, or disclosed the number of individuals potentially affected.
What Should You Do?
If you received care through UNM Health, are a current or former UNM Health employee or UNM Health student and/or received a formal notice stating that your personal information was involved in this cybersecurity incident, please contact our data breach attorneys by completing the form below to learn more about your potential legal rights and our ongoing investigation.
This is a questionnaire created by the law firm of Chimicles Schwartz Kriner & Donaldson-Smith LLP (CSK&D) to investigate potential claims related to this data breach. Your answers will be screened, and you may be contacted if your responses match certain criteria.
When you submit this form, it will not automatically collect your details like name and email address unless you provide it yourself.
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.
