Boston Scientific is currently addressing a cybersecurity breach that has disrupted several facets of its global operations. This incident has notably affected its manufacturing processes, order management, and product delivery systems.
Details of the Cybersecurity Incident
The security breach was identified on August 25, 2026, resulting in a network outage that impacted certain internal IT systems and business operations. Boston Scientific has engaged cybersecurity experts, including CrowdStrike, to investigate, contain, and recover from the incident.
In a recent update issued on August 30, Boston Scientific confirmed no unauthorized activities have been detected since the initial discovery date. The disruption is confined to on-premises systems, leaving the company’s cloud-based systems unaffected, which highlights the targeted nature of the attack.
Operational Impact and Recovery Efforts
The cyberattack has affected key systems vital for manufacturing, processing customer orders, and shipping medical devices. Despite the disruption, customers can still place orders through electronic data interchange (EDI) and local applications. However, these orders are queued until full operational capacity is restored.
Efforts are underway to partially restore shipping for select products in the week following the latest update. Boston Scientific is prioritizing the restoration of systems critical to product delivery and patient care to ensure minimal disruption to its services.
Impact on Medical Devices and Patient Care
The cyber incident has raised concerns among hospitals, clinicians, and patients relying on Boston Scientific’s medical devices. The company assures that devices not connected to its network are unaffected. Clinicians can continue using devices without connectivity issues, and there is no evidence of increased cybersecurity risks to hospital networks.
Boston Scientific provided specific information regarding its Cardiac Rhythm Management (CRM) devices. Existing remotely monitored devices remain functional, and remote patient monitoring continues for devices registered before the outage. However, new remote monitoring activations face delays due to the incident.
While newly implanted CRM devices can record episodes, they cannot currently pair with patient mobile devices for remote data transmission until systems are fully restored. Boston Scientific is prioritizing systems that impact customer access, product delivery, and patient care, although no timeline for full recovery has been disclosed.
The company has not revealed details regarding the attackers, their methods, or whether data theft or ransomware was involved. As investigations progress, Boston Scientific continues to focus on mitigating the impact of the incident and restoring full operational capabilities.
