Boston Scientific, one of the world's largest medical device manufacturers, has suffered a cyberattack that disrupted its global operations and prevented the company from processing and shipping customer orders. The firm disclosed the incident in a statement published August 26, saying it identified the breach a day earlier when certain information technology systems were compromised. An SEC Form 8-K filing confirmed the disruption was worldwide in scope, affecting a company with 59,000 employees, a commercial presence across 127 countries, and annual net sales of approximately $20 billion.
The attack triggered a network outage and operational disruption across the company, according to Boston Scientific's notice. Once the intrusion was discovered, the firm activated incident response protocols and launched an investigation with help from third-party cybersecurity specialists. The breach has blocked access to certain operating systems and business applications, including the critical functions needed to process and fulfill customer orders. Boston Scientific said it's working to restore affected systems but acknowledged that "the timeline for a full restoration is not yet known." The company's products are used to treat over 48 million patients annually.
The incident adds Boston Scientific to a lengthening roster of medtech companies targeted this year. In April, Medtronic confirmed a data breach following an attack by ShinyHunters, while June saw iRhythm Technologies report unauthorized activity in third-party applications. Abbott Laboratories disclosed two separate incidents in July involving unauthorized access at its cancer diagnostics division and LabCentral portal, though the company claimed no operational impact resulted. The closest parallel to Boston Scientific's situation came in March when Stryker was hit by pro-Iranian threat actors who used Intune to wipe corporate devices and force a shutdown of global offices.
Dray Agha, senior manager of security operations at Huntress, warned that the consequences extend well beyond the company itself. "When a major manufacturer is paralyzed and unable to process or ship medical orders, the disruption creates immediate ripple effects that can ultimately delay critical treatments and impact patient care down the line," he said. Modern cyberattacks rapidly bridge the digital and physical worlds, he explained, underscoring why manufacturing and medtech firms must prioritize strict network segmentation to prevent an intrusion in one corporate IT environment from derailing global business continuity. Ross Filipek, CISO at Corsica Technologies, noted that Boston Scientific's security team will now focus on containment and recovery, requiring constant visibility into which systems were affected and which are safe to bring back online. In healthcare settings, downtime carries operational consequences that accumulate quickly, making it essential that incident response both protects the environment and helps the business restore critical services as safely and efficiently as possible. For companies operating at the intersection of digital infrastructure and life-saving medical equipment, the ability to segment networks and maintain resilience isn't just a technical requirement—it's a patient safety imperative.