Boston Scientific

Summary

Boston Scientific experienced a cyberattack that triggered a network outage disrupting manufacturing, order processing and shipping worldwide, while also delaying remote‑monitoring activation for newly implanted cardiac devices; existing devices and cloud‑based systems remained unaffected. The company engaged external experts, reported no evidence of ongoing unauthorized access or data theft, and said the full operational and financial impact remains unknown as recovery efforts continue.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On August 25 2026 Boston Scientific detected unauthorized activity on certain of its information technology systems and immediately activated its incident response protocols. The detection triggered a network outage that disrupted global operations including manufacturing, order processing and shipping capabilities. The company reported that the outage affected business applications used to process and ship customer orders and that remote‑monitoring activation for newly implanted cardiac devices was interrupted while existing implanted devices continued to function normally. In response to the outage Boston Scientific sent home day‑shift employees at its Irish facilities in Cork, Clonmel and Galway and offered shift workers the option of unpaid or annual leave. The disclosure of the incident caused the company’s share price to fall by several percentage points in premarket and regular trading.

Boston Scientific engaged CrowdStrike and other third‑party cybersecurity experts to investigate the intrusion, contain the threat and begin recovery efforts. The company stated that its investigation remained ongoing and that it had observed no signs of malicious activity on its networks after August 25. Restoration work progressed with major distribution centers returning to processing and shipping orders at or above normal levels, sterilization facilities becoming operational and manufacturing resuming across most sites worldwide. The interruption affecting new patient activations for remote‑monitoring of cardiac devices was reported as resolved, with devices continuing to record data locally for later transmission once the monitoring functions are fully restored. Boston Scientific emphasized that it could not provide a timeline for full restoration and that some systems and business applications remained affected while the investigation continued.

The cyberattack prompted Boston Scientific to revise its 2026 financial outlook, indicating that it no longer expects to meet previously issued third‑quarter and full‑year sales and adjusted profit forecasts. The company said it expects to recover a portion of the affected revenue as it clears backlogs but noted that the full financial impact remains uncertain. Share price movements reflected the news, with declines reported in multiple outlets. Clinical trial systems sponsored by Boston Scientific were also impacted, as sponsor‑hosted electronic data capture and interactive response technology platforms became inaccessible, creating potential protocol deviations and documentation challenges. The company reiterated that there was no evidence of any impact on patient safety, device function or data breach, and that no ransomware group had claimed responsibility for the intrusion.

Throughout 2026 a number of other medical technology companies disclosed cyberattacks, though Boston Scientific has not attributed this incident to any specific threat actor or identified the initial access method. The firm stated that it would provide an updated operational and financial outlook when it reports its third‑quarter results on October 28 2026. The investigation into the scope, nature and operational and financial consequences of the cybersecurity incident remains ongoing.

Sources

Sources available to members: 27 sources.