Medical device maker Boston Scientific confirmed in a federal regulatory filing Wednesday that it is experiencing an ongoing cyberattack causing widespread disruption to its IT systems, the latest health technology company to be hit by a major cyberattack this year.
What Boston Scientific Has Confirmed
In a filing with the U.S. Securities and Exchange Commission, the Massachusetts-based company said that as of Tuesday, it began experiencing “disruptions and limitations of access” to IT systems and business applications critical to its operations. The company confirmed the cyberattack has affected its ability to ship and process orders, but has not said whether the disruption extends to customers with implanted medical devices.
Boston Scientific spokesperson Chanel Hastings shared the company’s public statement with TechCrunch but declined to answer whether patients are affected, what steps patients should take, or questions about the nature of the incident. The company’s public statement said its investigation is ongoing and that a timeline for restoring systems is not yet known.
The Scale of Boston Scientific’s Reach
Boston Scientific makes medically implanted devices including pacemakers and defibrillators, and treats approximately 48 million patients a year, according to the company’s own website. That scale is part of why the incident is drawing significant attention: even a disruption limited to corporate IT and order-processing systems, rather than devices themselves, can have downstream effects on care delivery given how many patients and providers depend on the company’s supply chain.
Local media in Ireland reported that thousands of staff at Boston Scientific’s campus in Cork were sent home Tuesday after network communications were cut across the company, an indication of how broadly the disruption has spread across the company’s international operations.
Part of a Pattern in Health Tech
Boston Scientific is the latest health technology company to be hacked in 2026, following incidents at medical device makers Abbott Laboratories and Medtronic. Earlier this year, Iranian-backed hackers were blamed for a cyberattack on medical device maker Stryker that allowed hackers to remotely wipe tens of thousands of employee devices across its Windows network by abusing a centralized device management portal provided by Microsoft.
According to public internet records, Boston Scientific relies largely on Microsoft and Amazon Web Services for its corporate infrastructure, though it’s not yet clear whether either platform played a role in how the attackers gained access.
Why It Matters
Cyberattacks on medical device makers carry a different risk profile than attacks on typical corporate targets, because the companies involved sit at the intersection of IT infrastructure and physical patient care. An order-processing disruption at a company supplying pacemakers and defibrillators can ripple into hospital supply chains and, potentially, patient scheduling, even without the attack directly touching implanted devices. The recurring pattern across Abbott, Medtronic, Stryker, and now Boston Scientific also suggests the health technology sector is facing sustained, rather than isolated, targeting.
What Happens Next
Boston Scientific has not provided a timeline for restoring affected systems, and the cause of the attack remains undisclosed. TechCrunch has an open request for information from anyone with direct knowledge of the incident or communications from Boston Scientific or the attackers.
For continuing coverage of healthcare cybersecurity and medical device security incidents, keep following Tech News Reports for ongoing updates.
