Boston Scientific Cyber Incident Disrupts Device Shipments

Boston Scientific says a cybersecurity incident detected on August 25 is disrupting manufacturing, customer-order processing and shipments, with additional effects on remote-monitoring activation for some newly implanted cardiac devices.

The medical-device company disclosed the incident in a Form 8-K filed with the Securities and Exchange Commission on August 26. In its latest product-specific update, posted August 28, the company said certain information systems and business applications remain unavailable or disrupted and that it does not yet know when full access will be restored.

Orders can be submitted but are being queued

Boston Scientific said customers can continue submitting orders electronically, including through the Global Health Exchange. However, it said it is currently unable to process or ship customer orders, so those orders are being held in a queue for later fulfillment.

The disruption also affects the company’s ability to manufacture products and other operating functions. Hospitals and clinicians may therefore experience delays in receiving some Boston Scientific products, although the company has not said that all products, customers or facilities are affected.

Reuters, MedTech Dive and Healthcare Dive independently reported the operational disruption and the absence of a stated timetable for full restoration.

What the company says about cardiac devices

Boston Scientific said it has found no known impact to the function of implanted cardiac rhythm-management devices. It also said remote monitoring that was already active before the network disruption remains unaffected, and that clinicians can continue using programmer interrogations.

The situation is different for some newly implanted devices. New remote-monitoring activations are delayed because communicators for certain cardiac devices cannot yet be activated. Until activation is restored, available device data will not be transmitted to the company’s remote patient-management systems.

For newly implanted insertable cardiac monitors, Boston Scientific said the devices cannot currently pair with a patient’s remote-monitoring mobile phone. The company said episodes will continue to be recorded and can be transmitted through an in-person interrogation using its Clinic Assistant app.

Patients should contact their cardiology team or device clinic for instructions specific to their device rather than assuming that every Boston Scientific product is affected in the same way.

No confirmed finding of stolen data

Boston Scientific has disclosed a cybersecurity incident, but it has not confirmed that personal, medical or other information was accessed or stolen. The company says the investigation remains ongoing and that the full scope and impact are not yet known.

The company also has not determined whether the incident is reasonably likely to have a material financial impact. Possible revenue or cost effects should therefore not be treated as confirmed losses.

The next important updates are likely to concern restoration of manufacturing, order-processing and shipping systems; guidance for patients with newly implanted devices; and the findings of the cybersecurity investigation.

Sources

• Boston Scientific Form 8-K filed August 26, 2026
• Boston Scientific August 28 cybersecurity and product update
• Reuters report on Boston Scientific’s global operational disruption