Boston Scientific confirmed a cyberattack detected on August 25 disrupted its IT systems and halted order processing globally. The medical device maker, which employs 59,000 people across 127 countries, has disclosed the incident to the SEC and brought in outside cybersecurity experts.
Boston Scientific, one of the world's largest medical device manufacturers, confirmed it suffered a cyberattack on August 25 that knocked out portions of its IT infrastructure and caused operational disruptions across its global network, the company said Wednesday.
The incident, first reported by BleepingComputer, triggered a network outage that cut off employee access to certain operating systems and business applications, including systems used to process and ship customer orders.
Boston Scientific activated its incident response procedures after detecting the intrusion and brought in external cybersecurity experts to assist with containment and investigation. The company said it does not yet know when all affected systems will be fully restored.
"The incident has caused, and is expected to continue to cause, disruptions and limitations of access to certain of the Company's information systems and business applications that support aspects of the Company's operations, including the ability to process and ship customer orders," Boston Scientific said in a statement. "While the Company is working diligently to restore affected functions and systems access, the timeline for a full restoration is not yet known."
The company disclosed the attack in a filing with the U.S. Securities and Exchange Commission, though the filing did not identify the type of attack, the threat actor, the initial access method, or whether any data was exposed or stolen.
At the time of publication, no ransomware or data extortion group had publicly claimed responsibility for the breach, according to BleepingComputer.
Boston Scientific is headquartered in Massachusetts and manufactures devices used in minimally invasive medical procedures, including stents, catheters, pacemakers, defibrillators, and endoscopes. The company employs approximately 59,000 people, operates 13 manufacturing facilities, maintains a presence in 127 countries, and reported annual revenue of more than $20 billion in 2025.
The company said its investigation into the nature, scope, and financial consequences of the incident remains ongoing. It did not offer any estimate of potential financial impact in its SEC filing.
The attack on Boston Scientific comes amid a broader pattern of cyberattacks targeting the healthcare and medical technology sectors, which security researchers have flagged as increasingly attractive targets due to the sensitivity of patient data and the operational dependencies of device supply chains. A disruption to order processing at a major device manufacturer carries particular urgency given hospitals' reliance on consistent supply of implantable and interventional equipment.
What investigators ultimately determine about the attacker's identity and methods—and whether any patient or clinical data was compromised—will shape both the regulatory and operational fallout the company faces in the weeks ahead.
TechEchelon Staff bylines are produced collectively by the newsroom for short, breaking, and wire-style coverage. Longer-form reporting is published under the responsible reporter's name.
More from the Staff →Democratic lawmakers have asked the Government Accountability Office to assess how nearly one-third of CISA's workforce being eliminated has affected the agency's ability to protect critical infrastructure, amid an escalating threat environment and a proposed FY2027 budget that would cut the agency further.
Hackers are actively exploiting a macOS Screen Sharing authentication bypass to deploy Monero miners on internet-exposed systems, while a newly patched maximum-severity SAP Commerce Cloud remote code execution flaw is already drawing exploitation attempts just three days after its August Patch Day release.
Data compromises in the U.S. reached 1,803 in the first half of 2026, already surpassing last year's full-year total, as AI-enabled attacks climbed 56% and malicious insider incidents hit an all-time high, according to the Identity Theft Resource Center.
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.