Boston Scientific Hit by Global Cyberattack Causing Operational Disruption
Medical device manufacturer Boston Scientific is experiencing a global operational disruption due to an ongoing cybersecurity incident that began Tuesday, impacting IT systems and business applications.
Medical device maker Boston Scientific has disclosed that its global operations have been significantly disrupted by an ongoing cyberattack. The company revealed in an SEC filing that the cybersecurity incident, which commenced on Tuesday, has led to a "global disruption to the company's operations." Upon detection of unauthorized access to its IT systems, Boston Scientific initiated an investigation with the assistance of third-party cybersecurity experts who are actively working to contain the threat.
The incident has resulted in, and is expected to continue to cause, disruptions and limitations in accessing certain of the company's information systems and business applications. These affected systems are critical for supporting various aspects of the company's operations, including its ability to process and ship customer orders. The full extent and nature of the cyberattack, along with its operational and financial impacts, remain unknown at this time, and Boston Scientific has not provided a timeline for full system restoration.
The news of the cyberattack had an immediate negative effect on the company's stock, with Boston Scientific shares reportedly falling more than 4% on Wednesday morning. As of the disclosure, no known threat actor groups have claimed responsibility for the intrusion.
This incident follows a trend of cyberattacks targeting the healthcare and medical device sectors. In March, Stryker, another major medical technology company, experienced a global network outage attributed to a cyber crew with ties to Iran's intelligence agency. More recently, in April, medical-device maker Medtronic disclosed its own cyberattack, which was claimed by the notorious data-theft-and-extortion group ShinyHunters. Medtronic later warned patients that their personal and health information had been compromised in that breach.
The lack of immediate attribution makes it difficult to pinpoint the exact motives or origin of the attack on Boston Scientific. However, the disruption to order processing and shipping suggests potential impacts on supply chains and customer service, which could have significant financial repercussions for the company.
Boston Scientific's reliance on interconnected IT systems for its complex manufacturing and distribution processes makes it a prime target for cybercriminals seeking to extort money or cause widespread disruption. The company's statement emphasizes the ongoing nature of the investigation and the uncertainty surrounding the full scope of the breach, underscoring the challenges in fully assessing and mitigating such sophisticated attacks.
As the investigation progresses, further details may emerge regarding the specific tactics, techniques, and procedures (TTPs) employed by the attackers, as well as the potential vulnerabilities exploited. The medtech industry, with its critical infrastructure and sensitive data, remains a high-value target for various threat actors, necessitating continuous vigilance and robust cybersecurity defenses.