West Pharmaceutical Services, a major supplier of injectable packaging and drug delivery systems, has disclosed a ransomware attack that disrupted its manufacturing and shipping operations globally, according to a filing with the Securities and Exchange Commission.
The Pennsylvania-based company, which employs more than 10,000 people across 50 locations and reported over $3 billion in net sales in 2025, said a hacker breached its network on May 4, stole data, and encrypted systems. The attack forced the company to shut down and isolate affected on-premise infrastructure and restrict access to enterprise systems.
“The incident and the company’s proactive response have temporarily disrupted the company’s business operations globally,” West Pharmaceutical’s general counsel wrote in the 8-K filing. While core enterprise systems have been restored and critical processes for shipping, receiving, and manufacturing have restarted at some sites, the timeline for complete restoration has not been finalized.
West Pharmaceutical partners with drug developers globally to produce stoppers and seals for injectable packaging, components for syringes and cartridges, auto-injectors, and wearable injectors. The company said it is still investigating what information was stolen and the financial impact remains unclear. Palo Alto Networks’ Unit 42 incident response team was hired to lead the investigation.
No ransomware group has taken credit for the attack as of the filing. The healthcare industry has faced an increased number of attacks in 2026 from both nation-state actors and cybercriminals, according to cybersecurity experts monitoring the sector.
