Medical technology company Boston Scientific is investigating a cyberattack that disrupted its IT systems and caused a network outage affecting operations worldwide. The incident has impacted the company’s ability to process and ship customer orders, according to a regulatory filing.
Boston Scientific manufactures devices used in minimally invasive procedures, including stents, catheters, pacemakers, and defibrillators. The company employs 59,000 people across 127 countries, treats an estimated 48 million patients annually, and reported more than $20 billion in net sales in 2025.
The company said it detected the incident on August 25 and immediately activated its incident response protocols. Third‑party cybersecurity experts have been engaged to help assess and contain the threat. “The investigation into the cybersecurity incident is ongoing,” Boston Scientific said in a statement.
In an SEC filing, the company confirmed that the attack disrupted access to systems and applications supporting global operations, including order processing and shipping. “While the Company is working diligently to restore affected functions and systems access, the timeline for a full restoration is not yet known,” the filing noted.
Boston Scientific also said it has not yet determined whether the incident is “reasonably likely to have a material impact,” leaving open the possibility that operational or financial consequences could emerge as the investigation continues.
Details about the nature of the attack remain limited, and no threat group has claimed responsibility. The incident adds to a growing list of cyberattacks targeting medtech companies this year, including Stryker, iRhythm Holdings, Novo Nordisk, and Xsolis.
