Update on recent cybersecurity incident | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware


Latest update — August 29, 2026 4:55 p.m. ET

Systems updates

The investigation into the cybersecurity incident is ongoing and we continue to work with CrowdStrike and other third-party cybersecurity experts.

At this time, our investigation indicates there is no impact to our cloud-based systems and applications and that the unauthorized activity is limited to certain on-premise systems. 

Communicating with Boston Scientific

Customers may continue communicating and exchanging information with Boston Scientific through their normal channels, including with sales representatives and other employees, in email and established digital platforms and connections.  

While the timeline for a full restoration is not yet known, we are currently working on restoring affected functions and systems access.

Ordering and shipping — customers can continue to place orders 

The incident is affecting access to certain operating systems and business applications, including the ability to manufacture products, as well as process and ship customer orders. We are working to resume these operations as quickly as possible.

We are able to intake orders electronically (through EDI and local applications) and place them in a queue for future fulfillment. This includes orders through the Global Health Exchange (GHX) which will be held until we are back online.  

We recognize the challenges incidents like this can create for customers, patients and suppliers and we appreciate your patience, trust and continued partnership as we work through this situation.  

 

August 28, 2026 7:34 p.m. ET

Cybersecurity update on Boston Scientific products

The investigation into the cybersecurity incident is ongoing. While we are working diligently to restore affected functions and systems access, the timeline for a full restoration is not yet known. Based on our ongoing assessment, currently we believe there is:

  • No known impact to devices not connected to a Boston Scientific network.
  • No known impact to the ability of clinicians to use devices that are not connected to a Boston Scientific network.
  • No evidence that the affected Boston Scientific network environment has created increased cybersecurity risk to hospital networks through use of Boston Scientific devices.
  • Specifically for Cardiac Rhythm Management devices*:

    • No known impacts to implantable device function or the ability for remote patient monitoring of a device that was remotely monitored prior to the network disruption. Programmer interrogations are not impacted.
    • New remote monitoring activations are impacted by the disruption:

      •  For new cardiac device implants — CRM devices other than insertable cardiac monitors (ICM): New remote monitoring communicators cannot be activated, thus available device data will NOT be transmitted to remote patient management systems until the communicator can be activated.
      • For new ICM device implants: Newly implanted ICMs must be activated using the Boston Scientific Clinic Assistant app to enable the ICM to properly record episodes. New ICMs are unable to pair to the patient remote monitoring mobile phone, therefore available episode data recorded by the ICM will NOT be transmitted to the remote monitoring system until the ICM can be paired to the patient mobile app. Episodes will continue to be recorded by the ICM and can be transmitted to the remote monitoring system via an in-person interrogation with the Clinic Assistant app by selecting the “Interrogate” button.
      • Once systems are restored and pairing with home monitoring equipment occurs, the device will transmit recorded data to the remote monitoring system. Timeline for full restoration is not yet known. Updates will be provided when these functions are restored.

*Cardiac Rhythm Management (CRM) devices referenced include Cardiac Implantable Electronic Devices (CIEDs) such as CRT-Ds, ICDs, CRT-Ps, PMs, S-ICDs, ICMs. Boston Scientific is continuing to investigate the incident and will provide updates as soon as they are available.

 

August 27, 2026 11:38 p.m. ET

——————————————————-


Click Here For The Original Source.