Boston Scientific Still Recovering From Cyberattack

On August 25, 2026, Boston Scientific detected an intrusion into some of its IT systems that led to a network outage disrupting global operations including product manufacturing, customer order processing, and shipping. The attack did not affect existing implantable cardiac rhythm management devices but disrupted new remote activations for some cardiac monitors. The breach appears limited to on-premises systems, with no further malicious activity detected since the incident. CrowdStrike and other cybersecurity experts were engaged to investigate the attack. The threat actor remains unknown, and no extortion or ransom demands have been publicly reported. Boston Scientific is still recovering and working to resume full operations.

The cyberattack caused significant operational disruption globally, impacting manufacturing, order processing, and shipping functions. While existing implantable cardiac devices were not affected, the attack disrupted new remote activations for some cardiac monitors, potentially delaying patient device management. The breach was limited to some on-premises IT systems, with no ongoing malicious activity detected after August 25. No data breach or compromise of implantable devices was reported. The attack resulted in partial suspension of business operations and delayed product shipments.

Boston Scientific has engaged CrowdStrike and other cybersecurity experts to investigate and respond to the incident. The company has found no signs of ongoing malicious activity since the initial breach and is actively working on recovery and resumption of operations. No public vendor advisory or patch information is available. Organizations should monitor for updates from Boston Scientific and rely on their incident response efforts. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.