Cyberattack Disrupts Operations of Medical Device Maker Boston Scientific Worldwide

Translated by a model; the original is in Russian.

· Security
One of the world's largest makers of medical devices has reported a breach of its IT systems that has halted order processing and shipping. The nature of the attack has not yet been disclosed.

cover.svg

Boston Scientific, an American company specializing in medical technology, has been hit by a cyberattack that knocked out part of its IT infrastructure and caused operational disruptions worldwide.

The incident was discovered on August 25. According to the company's statement today, the attack brought down its network and “affected access to certain operating systems and business applications, including the ability to process and ship customer orders.” After detecting the intrusion, Boston Scientific activated its incident response procedures and brought in outside cybersecurity specialists to investigate and contain the fallout.

Exactly when all the affected systems will be restored is something the company does not yet know. “The timeline for full recovery has not yet been determined,” the statement notes, while also emphasizing that the disruptions are ongoing and are expected to persist for some time.

The company's scale

Boston Scientific, headquartered in Massachusetts, develops and manufactures devices for minimally invasive procedures — stents, catheters, pacemakers, defibrillators, endoscopes and other equipment. It is one of the largest medical device manufacturers in the world: 59,000 employees, 13 production sites, a presence in 127 countries and annual revenue exceeding $20 billion in 2025. That is precisely why even a partial disruption in logistics and order processing is felt on a global scale.

The investigation is ongoing — the company is trying to determine the nature, scope and possible operational and financial consequences of the incident. In a filing submitted to the U.S. Securities and Exchange Commission (SEC), Boston Scientific discloses neither the type of attack, nor the identity of the perpetrators, nor the method by which initial access was obtained, nor whether any data was stolen.

As of publication, no extortion or ransomware group had claimed responsibility for the breach. The company has so far left BleepingComputer's request for additional comment unanswered.


Source: Bleeping Computer

Comments

Sign in, to comment.

  • No comments yet.