Ransomware attack disrupts Zuni Pueblo's Halona Plaza operations

BlackNevas-linked ransomware hit Zuni Shopping Center, Inc., the business behind Halona Plaza, and the disruption reached the plaza’s restaurant, convenience store and eight-room Inn at Halona in the center of Zuni Pueblo. Breachsense listed halonaplaza.com as the victim, BlackNevas as the threat actor and July 23, 2026, as the date discovered, with leak size unknown. SOCRadar separately listed Zuni Shopping Center, Inc. as a BlackNevas victim on July 22.

Halona Plaza says it has been family-owned since 1910 and sits in the village of Zuni, New Mexico, which makes the outage more than a technical problem for a single business. The plaza’s restaurant page promotes award-winning burgers and famous Halona Chicken, while the lodging side, The Inn at Halona, advertises eight rooms. That means the same place that serves meals, quick shopping needs and overnight stays was the target of the attack.

The plaza’s online presence also includes an ordering link tied to Zuni Shopping Center, a sign that the impact likely reached customer-facing sales channels, not just back-office computers. For residents and visitors moving through Zuni Pueblo, that matters because Halona Plaza functions as a food stop, a retail stop and a place to stay, all in one site.

The broader local context underscores the pressure on a small, community-centered economy. The Pueblo of Zuni’s official website posted documents dated July 23, 2026, including an emergency declaration and local calendars and notices, showing tribal operations and community information were still moving at the same time the plaza’s cyber incident was surfacing.

The public breach listings do not put a dollar figure on the damage, and the leak size remains unknown. What is clear is that a century-old Zuni business, anchored to daily errands and lodging in McKinley County’s far western edge, was pulled into a ransomware incident that could ripple through food access, shopping and overnight stays in the village.