Hackers attack US hospital, apologise and offer patients $2,500 each
In a rather unusual turn of events, a group of hackers has apologised after allegedly attacking a hospital in the United States. The ransomware gang, known as BYOD, claims it did not realise some of the computers it had targeted were helping patients receive medical care. After discovering this, the group offered free decryption keys and promised affected patients up to $2,500 each, approximately ₹2.38 lakh. Yes, the same hackers who allegedly disrupted hospital systems are now offering compensation.
The incident took place at the University of New Mexico Health Sciences Center on October 26, 2026. The cyberattack forced officials to divert ambulances and cancel outpatient appointments and surgeries. The disruption affected a health system that includes New Mexico’s only Level I trauma centre. According to reports by Gizmodo, BYOD subsequently claimed responsibility and published an apology on its data-leak website. The hospital has not independently confirmed the group’s claims.
:
Hackers apologise after realising what they attacked
The group initially claimed it had compromised around 36,000 devices across university and hospital systems.
On October 27, BYOD announced that it would provide free decryption keys for affected hospital devices.
“We did not know that it was running machines related to assisting patients in real-time,” the group said.
It then made an unusual offer.
“To any patient who was affected, please provide us proof, and we will pay you up to $2500 each for the inconvenience. We are sorry once again.”
The group even claimed it had morals, insisting it was not made up of villains.
There was one rather awkward detail. BYOD said it would keep the data it allegedly stole.
:
What happened at the hospital?
The attack disrupted medical services and prompted hospital officials to take emergency measures. Here is a timeline of the reported developments.
| Date | What happened |
|---|---|
| October 26 | Hospital detected a cybersecurity threat. |
| October 26 | Ambulances were diverted and some appointments were cancelled. |
| October 27 | BYOD offered free decryption keys and compensation to affected patients. |
| October 28 | Hospital confirmed services had resumed. |
The university said its investigation found that some user devices were affected, but core systems and servers had not been breached.
:
Is the $2,500 compensation offer genuine?
This is where the story becomes more concerning.
The hospital has warned patients against contacting anyone claiming responsibility for the attack.
It cautioned that cybercriminals might use fake compensation offers to obtain personal or financial information.
Officials confirmed that the university had made no concessions to the group.
There is no verified evidence that BYOD has actually paid any patient or provided decryption assistance.
:
Why are ransomware attacks on hospitals dangerous?
Ransomware can lock computers and prevent staff from accessing important information. In hospitals, even temporary disruptions can delay treatment, test results and emergency care.
This is not the first time hackers have apologised after attacking a medical institution.
In 2022, the LockBit ransomware group targeted Toronto’s SickKids hospital. The gang later apologised and offered a free decryption tool.
The New Mexico incident raises serious questions about the risks hospitals face from cyberattacks.
For patients, an apology from anonymous hackers offers little reassurance, especially when the same group claims it is keeping their data.