Boston Scientific: cybersecurity incident disrupted manufacturing, orders and shipping
Boston Scientific's customer updates say it identified a cybersecurity incident on 25 August 2026 that resulted in a network outage and disruption to its operations; the incident affected access to certain operating systems and business applications, including the ability to manufacture products and to process and ship customer orders (updates of 26, 27 and 29 August). The company filed an 8-K on 26 August describing a global disruption to its operations.
It worked with CrowdStrike and other third-party cybersecurity experts. Its 30 August update (8:25 p.m. ET) said it saw no indication of unauthorised activity in its environment related to the incident since 25 August, that there was no impact to its cloud-based systems and applications, and that the unauthorised activity was limited to certain on-premise systems.
Its 27 August update said its investigation to date showed no impact to implantable cardiac rhythm management (CRM) device function or to remote monitoring of CRM devices monitored before the disruption, while new remote-monitoring activations were impacted. Actor identity is unknown on this desk.
UPDATE (23 Oct 2026): Boston Scientific's 22 September 2026 update shares CrowdStrike's final investigation summary: the threat actor gained access to an external-facing network device and then to a limited portion of the on-premises IT environment. CrowdStrike found no evidence of ongoing threat actor activity after the 25 August containment measures, no evidence of compromise within Microsoft Office 365 applications (including email), other cloud-based applications or the listed business systems (manufacturing maintenance, product and software development, medical device maintenance, human resources and employee benefits, and SCADA environments), and no evidence that the actor accessed, staged or exfiltrated data from those systems and applications, including customer or patient data.
Boston Scientific says customers and partners may safely continue normal business activities and system connections. (source: Boston Scientific (news.bostonscientific.com))
- Exploited in Australia?
- unknown
