Boston Scientific

Summary

Boston Scientific detected a cybersecurity incident that caused a global disruption to the company's operations, affecting information technology systems and business applications used to process and ship customer orders. The company engaged third‑party cybersecurity experts to investigate and contain the threat, but has not yet determined a timeline for full restoration or whether the incident will have a material impact on its business. Shares fell in premarket trading, and a network outage led to employees at Irish sites being sent home while recovery efforts continue.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On August 25, 2026, Boston Scientific detected a cybersecurity incident affecting certain of its information technology systems. The company said it uncovered the incident on Tuesday and began experiencing disruptions and limitations of access to its IT systems and business applications. The detection prompted activation of incident response procedures and notification of third‑party cybersecurity experts to assist with investigation and containment. The incident was disclosed to regulators in a filing with the U.S. Securities and Exchange Commission on August 26, 2026.

The cyberattack caused a global disruption to Boston Scientific’s operations, particularly affecting systems used to process and ship customer orders. Employees at the company’s Irish sites in Cork, Galway and Clonmel were sent home after network communications were cut, with thousands of staff across the Cork campus instructed not to report for work. The disruption limited access to business applications that support order fulfillment, affecting the company’s ability to process and ship customer orders. In premarket trading following the announcement, Boston Scientific’s share price fell between 3.5% and 6%, reflecting market concern over the operational impact.

Boston Scientific engaged outside cybersecurity specialists to investigate the threat and contained the incident while working to restore affected functions and systems access. The company stated that it had not yet determined whether the incident is reasonably likely to have a material impact on its business, and that the full scope and nature of the attack remain under investigation. Although the timeline for full restoration was not disclosed, the firm said it was working diligently to restore normal operations and would provide further updates as more information becomes available. No details about the attackers’ identity, motive, or specific malware were provided in the public disclosures.

Sources

Sources available to members: 5 sources.