Medical technology company Boston Scientific was the target of a cyberattack that disrupted some of its IT systems, causing operational disruption worldwide.
The company discovered the incident on August 25 and says in an announcement today that it caused a network outage and “affected access to certain operating systems and business applications, including the ability to process and ship customer orders.”
After identifying the breach, Boston Scientific activated its incident response procedures and hired external cybersecurity experts to investigate the impact and assist in containment efforts.
The company said it does not yet know when all affected systems will be restored.
“The incident has caused and is expected to continue to cause disruptions and limitations of access to some of the Company’s information systems and business applications that support aspects of the Company’s operations, including the ability to process and ship customer orders,” Boston Scientific states.
“While the company is working diligently to restore affected functions and access to systems, the timeline for full restoration is not yet known.”
Boston Scientific is a Massachusetts-based medical technology company that develops and manufactures devices used in minimally invasive procedures, including stents, catheters, pacemakers, defibrillators, endoscopes and more.
It is one of the largest medical device manufacturers in the world with 59,000 employees, 13 manufacturing facilities, a presence in 127 countries and annual revenue of over $20 billion in 2025.
Boston Scientific says the investigation is ongoing as the company works to determine the nature, scope, and operational or financial implications of the cybersecurity incident.
In the document disclosing the attack to the US Securities and Exchange Commission (SEC), the company did not share any details about the type of cyberattack, the attacker, the initial method of access, or whether any data was exposed or stolen by the threat.
At the time of writing, BleepingComputer could not find a single data extortion actor or ransomware threat claiming to be a breach at Boston Scientific.
BleepingComputer has reached out to the company for more information, but we’re still waiting for a response.
Generic prevention scores can hide what happens after initial access. Once attackers use valid credentials, prevention plummets.
The 2026 Blue Report measures security techniques by techniques in 338 million simulations run in customer production environments.
