[CLSTR]
< Back to situation

[REVISION HISTORY]

Boston Scientific cybersecurity incident

Updated 2 times since CLSTR started tracking revisions of this situation.

What changed

2026-09-09 06:17 UTC → 2026-09-10 20:45 UTC · added removed

On August 25, 2026, Boston Scientific identified a cybersecurity incident that caused global operational disruptions. The attack impacted information technology systems and business applications, hindering the company’s ability to process and ship customer orders. The disruption led to regional consequences, such as staff at facilities in Cork, Ireland, being sent home, and caused the company’s shares to drop by as much as 5%. By late August, the company reported that the intrusion appeared limited to specific on-premises systems, with no impact on cloud-based applications and no new signs of unauthorized activity as of August 30. applications. While the company worked toward a partial restoration of product shipping, it noted specific impacts on patient monitoring. Although the function of implantable cardiac rhythm management devices remains remained unaffected, newly implanted devices faced disruptions: remote communicators for certain devices could not be activated, and new insertable cardiac monitors could not pair with patients’ phones. While these monitors continue to log data for in-person reviews, the automatic pipeline for flagging issues between appointments was unavailable. On By September 8, 10, 2026, Boston Scientific reported that manufacturing, shipping, and order fulfillment operations had resumed, with products moving through the distribution network at or above normal levels to clear backlogs. Remote monitoring activations for cardiac device implant communicators and ICM remote monitoring were also restored. Independent assessments by CrowdStrike and other forensic specialists found no evidence of ongoing threat activity or compromise to product technologies, software systems, or cloud-based platforms. Despite the operational recovery, the company warned in an 8K filing that the incident is likely to have a “material impact” on its third-quarter and full-year 2026 financial results. The company Management stated it is unlikely to meet the net sales growth and adjusted earnings-per-share ranges previously provided in July. Following this announcement, the company's stock experienced a significant decline. Management expects to provide an An updated outlook is expected when third-quarter results are released on October 28, though the company noted it does not expect the incident to have a material impact on its long-term financial condition. 28.

Versions

  1. 2026-09-10 20:45 UTC Boston Scientific cybersecurity incident
  2. 2026-09-09 06:17 UTC Boston Scientific cybersecurity incident
  3. 2026-09-01 04:45 UTC Boston Scientific cybersecurity incident

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.