Boston Scientific, the Massachusetts-based medical technology giant behind pacemakers, defibrillators, stents, and endoscopes, disclosed that it has been hit by a cyberattack that disrupted IT systems and caused operational disruptions across its global operations. The company activated its incident response procedures immediately after detecting the intrusion and hired external cybersecurity specialists to help investigate and contain the damage.
The company currently does not know when all affected systems will be fully restored. In an SEC filing disclosing the incident, Boston Scientific did not reveal the type of attack, the identity of the threat actor, how attackers gained access, or whether any data was stolen. No ransomware group or extortion actor had claimed responsibility as of the time of writing. With 59,000 employees, facilities in 127 countries, and over $20 billion in annual revenue, a prolonged disruption to its systems could have broad implications for hospitals and patients who depend on the company’s devices worldwide.