Loading story…
Boston Scientific said a cyberattack identified on August 25 forced it to take systems offline, disrupting global manufacturing, customer-order processing, and shipments. The medical-device maker withdrew its previous third-quarter and full-year 2026 sales and adjusted-profit guidance, warning that the incident will likely materially affect sales growth and earnings while the full financial impact remains uncertain.
The company said major distribution centers, sterilization facilities, and most manufacturing sites have substantially resumed operations, and it expects to recover some deferred revenue as backlogs normalize. Product-quality reviews found no impairment, though new activations of its cardiac-device remote-monitoring platform were disrupted; some internal systems and business applications remain impaired. Boston Scientific reported no evidence of continuing unauthorized access, while the attack vector, responsible actor, potential ransomware or data theft, and overall impact remain under investigation.
See attribution, scope, and your downstream exposure.
6 events from the most recent confirmed update back to the earliest known activity.
Boston Scientific publicly disclosed the cybersecurity incident and said the unauthorized activity appeared limited to certain on-premises systems, while cloud applications were unaffected. It reported no known impact to medical devices outside its network and no evidence of increased cybersecurity risk to hospital networks.
Boston Scientific took certain systems offline to contain the incident, causing a network outage that disrupted global manufacturing and applications used to process and ship customer orders.
Boston Scientific identified unauthorized activity on some of its IT systems, triggering a cybersecurity incident that affected its network.
Boston Scientific said it had found no evidence of continuing unauthorized access but that its investigation remained ongoing. The company had not disclosed the initial access method, responsible actor, ransomware involvement, or whether data was stolen.
The company reported that major distribution centers, sterilization facilities, and most manufacturing sites had resumed operations; the interruption to new remote cardiac-device patient activations was resolved. Some systems and business applications remained impaired, and the company could not estimate full recovery timing.
Boston Scientific said it was unlikely to meet its previously issued third-quarter and full-year 2026 sales-growth and adjusted-earnings guidance because the incident's full financial impact remained uncertain. It expected to recover some deferred revenue while clearing operational backlogs.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
3 references tracked. Mallory keeps watching after this page renders.
teiss.co.uk
Open sourcebusinessinsurance.com
Open sourcetheregister.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Boston Scientific disclosed an ongoing cyberattack that disrupted IT systems and operations globally. The incident caused a network outage that restricted access to operating systems, information systems, and business applications, including systems used to process and ship customer orders. The medical-device manufacturer activated its incident-response process and retained external cybersecurity specialists to investigate and contain the intrusion. Boston Scientific has not identified an attacker or attack vector, confirmed ransomware involvement, or reported evidence of data theft; the full scope, restoration timeline, and operational and financial effects remain under assessment.
Sep 1, 2026
Boston Scientific disclosed a cyberattack that disrupted IT systems globally, causing a network outage that limited access to operating systems and business applications. The outage has impaired the medical-device manufacturer’s ability to process and ship customer orders, creating potential supply-chain and revenue impacts. The company activated incident-response procedures and engaged external cybersecurity specialists to investigate and contain the incident. Boston Scientific has not identified an attacker, intrusion vector, malware, data theft, or impact to customer devices and implants; it is still assessing whether production, quality, operational, or financial systems were affected. Restoration timing remains unknown, and regulated manufacturing recovery may require validation of production and quality-record integrity before normal operations resume.
Aug 27, 2026
Signature Healthcare in Brockton, Massachusetts said a cyberattack disrupted clinical and administrative operations across its hospital and outpatient network, forcing the diversion of ambulance traffic and taking electronic health records and the patient portal offline. The incident also halted prescription filling at the organization's two retail pharmacies and temporarily canceled chemotherapy infusion services, while inpatient care, emergency walk-in services, surgeries, and some procedures continued. The provider said its medical group and urgent care practices remained open, although patients could face delays as response efforts continued. The disruption adds to a broader run of cyber incidents affecting U.S. healthcare organizations, including a February ransomware attack on the University of Mississippi Medical Center and a January breach at Nacogdoches Memorial Hospital that affected more than 257,000 people; Signature Healthcare had not disclosed further technical details about the attack at the time of reporting.
Jun 29, 2026