BYOD is the name used by a ransomware and extortion-branded operation indexed by ransomware.live. A claim naming the University of New Mexico was discovered by the index Oct. 26, 2026. This establishes the use of the name in a public claim, rather than independently verified responsibility for an intrusion. The reviewed evidence does not establish when the operation began.
The reviewed claim names the University of New Mexico and alleges access to university and hospital environments. One claim does not establish the group’s wider targeting, geographic reach or history.
The claim alleges extensive access to identity services, databases and sensitive information. The reviewed index material does not independently establish the access method, encryption, data authenticity, affiliate arrangements or a ransom payment.
BYOD is cataloged here as a ransomware group on the basis of its indexed branding and extortion-style claim. That classification is provisional and does not establish ransomware deployment at any named victim. Membership, location, state alignment, aliases and relationships to other operations remain unresolved.
BYOD claims compromise of 36,000 machines, main-campus and hospital identity environments, databases and sensitive student, employee, research and patient information. UNM has confirmed a cybersecurity issue and operational disruption, but has not corroborated BYOD attribution, encryption, data possession or the alleged scale. Index discovery is not the claim publication or attack-onset time.
