Breach taxonomy
Summary
On August 25, 2026, Boston Scientific identified a cybersecurity incident involving unauthorized activity on certain information technology systems, causing a network outage that globally disrupted operations. The outage cut access to operating systems and business applications supporting manufacturing and the processing and shipping of customer orders. By September 8 the company had substantially restored its distribution network and resumed manufacturing at most facilities globally, though the timeline for full recovery remained uncertain. The company determined the incident is likely to have a material impact on Q3 and full-year 2026 results and said it is unlikely to meet its previously issued net sales growth and adjusted EPS guidance. Initially disclosed under Item 8.01 on August 26, 2026 (accession 0000885725-26-000056) before materiality was determined.
Tagging rationale
ThreatUnknown
Filing describes only 'unauthorized activity on certain of the Company's systems' and does not attribute the incident to any actor category -> UNKNOWN.
MethodsSystem Outage
Filing reports unauthorized activity 'that resulted in a network outage affecting access to certain operating systems and business applications'; no ransomware, encryption or data theft is disclosed -> SYSTEM-OUTAGE.
AssetsRevenue ProcessProduct Service
Filing states the outage 'impacted the Company's ability to manufacture as well as process and ship customer orders' and that distribution centers and sterilization facilities were affected -> REVENUE-PROCESS plus PRODUCT-SERVICE.
EffectsBiz Interruption
Filing states the incident caused 'a global disruption to the Company's operations' and is likely to have a material impact on Q3 and full-year results -> BIZ-INTERRUPTION.
Business continuityPartial
The company 'activated its incident response protocols' and achieved substantial restoration of distribution and most manufacturing within two weeks, but states 'the timeline for a full operational recovery is uncertain' -> Partial.
Impact
Enterprise-wide outage halted manufacturing and order shipment globally for roughly two weeks and the company withdrew both Q3 and full-year 2026 net sales and adjusted EPS guidance as a material impact -> score 4.
InsuranceNot disclosed
Filing makes no mention of insurance -> null.
Read the original SEC filing excerpt
Item 1.05 Material Cybersecurity Incidents. As previously disclosed in a Current Report on Form 8-K filed on August 26, 2026 with the Securities and Exchange Commission, on August 25, 2026, Boston Scientific Corporation (the " Company ") identified a cybersecurity incident that affected certain of its information technology systems and resulted in a global disruption to the Company's operations. Upon detection, the Company activated its incident response protocols, and since then has been working, with the assistance of third-party cybersecurity experts, to investigate, assess and contain the impact of the incident and to restore operations. The incident involved unauthorized activity on certain of the Company's systems that resulted in a network outage affecting access to certain operating systems and business applications, which impacted the Company's ability to manufacture as well as process and ship customer orders. As of the date of this Current Report on Form 8-K, the Company has not identified evidence of ongoing unauthorized access to its systems. The Company's investigation of the incident remains ongoing. The Company continues to make progress in restoring many of the affected systems, including substantial restoration of its distribution network, with major distribution centers now processing and shipping customer orders at or above normal operating levels. Additionally, the Company's sterilization facilities are now operational and manufacturing has resumed across most facilities globally. While the timeline for a full operational recovery is uncertain, the Company continues to work diligently to fully restore all affected systems. Based on the information currently available as of the date of this Current Report on Form 8-K, the Company has determined that the incident is likely to have a material impact on the Company's results of operations for the third quarter and full year 2026. As a result, the Company believes that it is unlikely to meet the net sales growth and adjusted EPS guidance ranges for the third quarter and full year 2026 that the Company previously provided on July 29, 2026. The Company anticipates recovering some portion of the impacted revenue as it continues to ramp operations globally, fulfill customer orders and reduce remaining backlogs, however the full impacts are not yet known. The Company intends to provide an update on its operational and financial outlook for the remainder of fiscal year 2026, incorporating the anticipated impact of the incident, during its planned conference call to discuss financial results and business highlights for the third quarter 2026 to be held on Wednesday, October 28, 2026. As of the date of this Current Report on Form 8-K, the Company does not expect the incident will have a material impact on its long-term financial condition.