Boston Scientific Faces Financial Setback After Cyberattack Disrupts Production
Medical device manufacturer Boston Scientific disclosed that a cyberattack on August 25th caused a nearly two-week pause in production and shipping, materially impacting its third-quarter and full-year 2026 financial results.
Medical device maker Boston Scientific has announced that a significant cyberattack, which began on August 25th, forced a nearly two-week halt in its production and global shipping operations. This disruption is expected to have a material impact on the company's financial performance for the third quarter and the entirety of 2026, causing it to miss previously projected sales growth targets.
The attack disrupted not only product manufacturing but also the activation of remote monitoring systems for cardiac device implant communicators and insertable cardiac monitors. While the company has since restored these operations, the full financial repercussions are still being assessed. Boston Scientific anticipates recovering some of the lost revenue as it ramps up global operations, fulfills backlogged orders, and works to clear remaining backlogs.
Prior to the incident, Boston Scientific had forecasted quarterly revenue between $5.22 billion and $5.32 billion, representing a 3% to 5% sales growth. The company now expects to fall short of this target due to the operational pause. Investors will receive further updates on the company's financial outlook during its scheduled earnings call on October 28th.
This incident places Boston Scientific among several other medical device companies that have experienced cyberattacks this year. Notable victims include Stryker, Medtronic, Intuitive, and Abbott, which have all faced various cyber incidents ranging from data breaches to operational disruptions.
Boston Scientific first publicly acknowledged the attack on August 26th, stating that it had impacted information systems and business applications crucial for manufacturing, processing, and shipping customer orders. The company is currently collaborating with CrowdStrike and other third-party cybersecurity experts to investigate the incident.
Initial findings from the investigation indicate that the cyberattack primarily affected the company's internal infrastructures, leading to the halt in business operations and device activations. Crucially, the company has stated that there is no evidence of a breach of personal data, nor has there been any impact on hospital networks utilizing Boston Scientific devices. The identity of the attackers and the initial entry vector remain undisclosed.
As of the latest disclosure, Boston Scientific is processing and shipping customer orders at or above normal operating levels and has resumed operations at most of its global sterilization facilities. The company emphasized its ongoing efforts to fully restore all affected systems, though the exact timeline for complete operational recovery remains uncertain.
The attack underscores the persistent cybersecurity risks faced by the healthcare and medical device sectors, where operational disruptions can have significant financial and patient care implications. The ongoing investigation aims to provide a clearer picture of the attack's scope and the measures being implemented to prevent future incidents.