News · Security & privacy

Boston Scientific says a cyberattack that halted manufacturing will likely hit its results for the year

The medical-device maker told the SEC it probably won't meet its sales and earnings guidance after an incident on 25 August disrupted its operations worldwide.

Catching up: the original came out on . This story was published later, when the site opened.

Boston Scientific says an August cyberattack will likely cost it its 2026 guidance

Grade 3 · Filed record

Source: Boston Scientific, via SEC EDGAR

What changed
Boston Scientific filed that a cyberattack found on 25 August, which disrupted manufacturing and shipping worldwide, is likely to materially affect its 2026 results.
Who it affects
Boston Scientific's own operations: its factories, sterilisation sites and distribution centres, and the customers whose orders were delayed.
What it does not tell you
Who attacked it, whether any data was taken, and how much revenue it lost. The investigation is ongoing and the filing gives no figures.

The full story Check the source

Boston Scientific told the US Securities and Exchange Commission on 8 September that a cyberattack is likely to have a material impact on its results for the third quarter and the full year 2026 [1].

The company says it is now unlikely to meet the sales-growth and adjusted earnings guidance it gave on 29 July [1].

It identified the incident on 25 August. Unauthorised activity caused a network outage that cut access to operating systems and business applications, affecting its ability to manufacture, process and ship orders [1].

What it covers

The company's operations worldwide. By its filing on 8 September, its main distribution centres were shipping at or above normal levels, its sterilisation sites were working, and manufacturing had resumed at most facilities [1].

It had found no evidence of continuing unauthorised access, and says the timeline for a full recovery is uncertain [1].

It expects to recover some of the lost revenue as it clears backlogs, and will update its outlook on 28 October with its third-quarter results [1].

What it does not tell you

Who was behind the attack, or whether data about patients, customers or staff was taken. The filing does not say, and the investigation is continuing [1].

How much revenue was lost. The filing gives no figure [1].

Sources and their grades

  1. Boston Scientific, via SEC EDGAR, Boston Scientific Corporation Form 8-K, 7 September 2026 (Item 1.05, Material Cybersecurity Incidents). Read 29 September 2026. Grade 3 · Filed record A legally required disclosure, filed 8 September 2026. It updates the company's first filing about the incident on 26 August.

A grade says how much weight a source will take, from 1 (a body that can compel an answer and has nothing to sell) to 5 (somebody describing what they sell, or themselves). The standard sets out what each grade may be used for.

Filed under Cyberattacks, Health tech

Comments

Commenting needs an account, made with nothing but an email address. A first comment is read before it appears.

More news

See all