Loading story…
Boston Scientific disclosed an ongoing cyberattack that disrupted IT systems and operations globally. The incident caused a network outage that restricted access to operating systems, information systems, and business applications, including systems used to process and ship customer orders.
The medical-device manufacturer activated its incident-response process and retained external cybersecurity specialists to investigate and contain the intrusion. Boston Scientific has not identified an attacker or attack vector, confirmed ransomware involvement, or reported evidence of data theft; the full scope, restoration timeline, and operational and financial effects remain under assessment.
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
Boston Scientific publicly disclosed the ongoing incident in an SEC filing, stating that the nature, scope, and operational and financial effects remained under assessment and that it had no timeline for full restoration. The company did not identify an attacker, confirm ransomware involvement or data theft, and no threat actor had publicly claimed responsibility.
Boston Scientific detected a cybersecurity incident that disrupted IT systems globally, limiting access to operating systems and business applications, including those used to process and ship customer orders. The company activated incident-response procedures and retained external cybersecurity experts to investigate and contain the intrusion.
Boston Scientific said the apparent compromise was limited to some on-premises systems and that it had found no signs of malicious activity on its networks since August 25. It said existing implantable cardiac rhythm-management devices were unaffected, while new remote activations for some cardiac monitors were disrupted, and anticipated partially resuming shipments of some products.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
10 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcesecurityweek.com
Open sourcescworld.com
Open sourcetherecord.media
Open sourcetheregister.com
Open sourcebleepingcomputer.com
Open sourcesec.gov
Open sourcenews.bostonscientific.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Boston Scientific disclosed a cyberattack that disrupted IT systems globally, causing a network outage that limited access to operating systems and business applications. The outage has impaired the medical-device manufacturer’s ability to process and ship customer orders, creating potential supply-chain and revenue impacts. The company activated incident-response procedures and engaged external cybersecurity specialists to investigate and contain the incident. Boston Scientific has not identified an attacker, intrusion vector, malware, data theft, or impact to customer devices and implants; it is still assessing whether production, quality, operational, or financial systems were affected. Restoration timing remains unknown, and regulated manufacturing recovery may require validation of production and quality-record integrity before normal operations resume.
Aug 27, 2026
Signature Healthcare in Brockton, Massachusetts said a cyberattack disrupted clinical and administrative operations across its hospital and outpatient network, forcing the diversion of ambulance traffic and taking electronic health records and the patient portal offline. The incident also halted prescription filling at the organization's two retail pharmacies and temporarily canceled chemotherapy infusion services, while inpatient care, emergency walk-in services, surgeries, and some procedures continued. The provider said its medical group and urgent care practices remained open, although patients could face delays as response efforts continued. The disruption adds to a broader run of cyber incidents affecting U.S. healthcare organizations, including a February ransomware attack on the University of Mississippi Medical Center and a January breach at Nacogdoches Memorial Hospital that affected more than 257,000 people; Signature Healthcare had not disclosed further technical details about the attack at the time of reporting.
Jun 29, 2026
West Pharmaceutical Services disclosed that attackers breached its network, stole data, and encrypted parts of its environment in a ransomware attack that disrupted global business operations. The Pennsylvania-based manufacturer said it detected the incident on May 4 and responded by shutting down and isolating affected on-premise infrastructure, restricting access to enterprise systems, notifying law enforcement, and bringing in Palo Alto Networks' Unit 42 to support containment, forensics, and recovery. The company said the attack affected critical systems used for shipping, receiving, and manufacturing products, though core enterprise systems have since been restored and some sites have resumed critical processes and partial manufacturing operations. West is still investigating what data was exfiltrated and whether the incident will have a material financial impact, and no ransomware group had publicly claimed responsibility at the time of reporting.
Jun 29, 2026