Boston Scientific, one of the world’s largest makers of pacemakers, cardiac ablation systems, and other implantable devices, is working through a cyberattack that has stalled the medical device supply chain. The company told the SEC on August 26 that an incident identified the day before knocked out access to business applications and disrupted its ability to process and ship customer orders.
The Massachusetts-based company, whose products treat more than 48 million patients a year across 127 countries, activated its incident response plan and brought in third-party cybersecurity experts to contain the breach and determine its scope. It has not said whether ransomware was involved, whether data was stolen, or when systems will be fully restored, and no threat group has claimed responsibility so far.
The disruption is global, with employees at Boston Scientific’s manufacturing and research sites in Cork, Ireland, sent home Wednesday because they could not work. Security researchers note the outage can ripple straight into operating rooms: a cardiac device that misses its ship date can mean a cancelled surgery, and downtime that outlasts a ransom demand gives attackers little reason to stop.
The outage extends a rough year for device makers. ShinyHunters published 7.1 million Baxter International records this week, and Medtronic, Stryker, Abbott Laboratories, and AdaptHealth all disclosed intrusions earlier in 2026.
Hospitals that rely on Boston Scientific inventory should confirm stock levels and alternative sourcing paths while recovery continues.
