Medical technology manufacturer Boston Scientific has disclosed a cyberattack that disrupted access to some IT systems and business applications, affecting operations worldwide.
The company identified the cybersecurity incident on August 25 and said the resulting network outage affected access to systems used to process and ship customer orders. In an update on the incident, Boston Scientific said the attack had caused operational disruptions across parts of its global business.
After detecting the intrusion, Boston Scientific activated its incident response procedures and brought in external cybersecurity specialists to investigate the attack, assess its impact, and support containment and recovery efforts.
The company has not yet provided a timeline for restoring all affected systems and applications.
“This incident has resulted in, and is expected to continue to disrupt, access to certain of our information systems and business applications that support aspects of our operations, such as the ability to process and ship customer orders,” Boston Scientific said in a filing with the U.S. Securities and Exchange Commission.
“We are working diligently to restore access to affected functionality and systems, but the timeline for full recovery is not yet known,” the company added.
Boston Scientific, headquartered in Massachusetts, develops and manufactures medical devices used in minimally invasive procedures. Its products include stents, catheters, pacemakers, defibrillators, and endoscopes.
The company is one of the world’s largest medical device manufacturers, employing approximately 59,000 people. Boston Scientific operates 13 manufacturing facilities, serves customers in 127 countries, and reported annual revenue of more than $20 billion in 2025.
Boston Scientific said its investigation is ongoing and will focus on determining the nature and scope of the cyberattack, as well as its potential operational and financial impact.
In its SEC filing, the company did not disclose what type of cyberattack occurred, who was responsible, how the attackers initially gained access, or whether sensitive data was accessed or stolen.
As of publication, BleepingComputer had not identified any ransomware or data extortion group claiming responsibility for compromising Boston Scientific.
BleepingComputer contacted Boston Scientific for additional information and is awaiting a response.
The overall prevention score can hide what happens after initial access. When an attacker uses valid credentials, the effectiveness of your defenses can drop sharply.
Blue Report 2026 measures defense techniques by technology across 338 million simulations conducted in customer production environments.
Source: www.bleepingcomputer.com