Boston Scientific Cyberattack Disrupts Manufacturing and Product Shipments

Boston Scientific is working to restore its manufacturing, order processing, and distribution capabilities following a cybersecurity incident that caused a network outage across certain internal IT systems.

In an August 30 update, the medical device manufacturer reported that investigators had found no signs of unauthorized activity in its environment since August 25.

The disruption is limited to specific on-premises systems; cloud-based systems and applications remain unaffected. The company has engaged CrowdStrike and other third-party cybersecurity experts to assist with ongoing investigation and recovery efforts.

Boston Scientific Cyberattack

Boston Scientific first disclosed the incident on August 26, indicating that it had identified the issue a day earlier and activated incident response protocols to investigate and contain the threat.

The outage has disrupted access to the operating systems and business applications necessary to manufacture products, process customer orders, and ship finished devices.

Customers can still submit orders electronically through electronic data interchange (EDI) and local applications; however, these orders are currently held in a fulfillment queue until the affected operations resume.

The company aims to partially restore shipping capabilities this week, with a plan to gradually ramp up order processing and shipping to full capacity once the environment is operational again.

The operational disruption has direct clinical implications, as Boston Scientific provides medical technologies and manages connected device services.

The company confirmed that there has been no known impact on devices not connected to the Boston Scientific network, nor is there any evidence that the affected systems have increased cybersecurity risks for hospital networks using its devices.

It also reported no known issues with the functionality of implantable cardiac rhythm management devices, programmer interrogations, or remote monitoring for devices already enrolled before the outage.

However, new remote monitoring activations are currently affected, delaying communications and data transmission for some newly implanted cardiac devices and insertable cardiac monitors.

For non-ICM CRM implants, new remote monitoring communicators cannot be activated at this time, meaning that the available device data will not reach remote patient management systems until activation resumes.

For new ICM implants, the Clinic Assistant app can activate recording. However, the affected devices cannot pair with the patient’s remote monitoring mobile phone.

Boston Scientific reported that episodes continue to be recorded and can be transmitted via the app during in-person interrogations. Once pairing and systems are restored, stored data should be sent to the remote monitoring platform. The company has not yet provided a timeline for complete restoration.

Recovery now depends on safely rebuilding access to core on-premises business processes without compromising medical product availability or patient care.

This incident highlights how IT outages at healthcare manufacturers can extend beyond corporate workflows into production, logistics, and connected care onboarding.

Boston Scientific stated it is prioritizing systems that have the greatest impact on customers and product delivery and will issue further updates as functionality is restored. The company’s newsroom has publicly posted updates on the incident for stakeholders.

Prevent incidents due to slow investigations. Power your Tier 1 with threat intelligence from 15K SOCs: Integrate TI Lookup in your SOC