Boston Scientific confirmed on August 25, 2026, that a cybersecurity incident is affecting its on-premise systems globally. Workers at the Cork, Ireland manufacturing facility have been sent home. The company cannot process or ship customer orders. CrowdStrike is engaged for incident response. Boston Scientific manufactures pacemakers, stents, neuromodulation devices, and other implanted medical hardware.
What makes this different from a standard enterprise breach
Most cybersecurity incidents disrupt business workflows: email, ERP systems, CRM. A Boston Scientific disruption is different because the pipeline interrupted has clinical consequences. When a hospital cannot receive replacement pacemaker leads, pulse generators, or neuromodulation components, clinicians must delay procedures or work from existing on-hand inventory. Implanted device replacement is not discretionary.
CrowdStrike in the room, and what that signals
The company named CrowdStrike as its IR partner. That choice matters: CrowdStrike's Falcon platform was already deployed in the environment, so forensic continuity exists from the first hour. The company confirmed unauthorized activity is limited to on-premise systems with cloud systems unaffected. This is consistent with a network-isolated ransomware event, though no ransomware group has claimed responsibility publicly as of August 31.
The OT and manufacturing resilience question
Healthcare manufacturers have historically treated IT and OT as separate risk categories. This incident shows that shared on-premise infrastructure can eliminate manufacturing capacity without any attacker reaching industrial control systems directly. An ERP outage that blocks order processing is operationally equivalent to an OT outage from the supply chain perspective. The distinction matters less than the outcome.
What to do now
Medical device distributors and hospital procurement teams should audit safety-stock levels for Boston Scientific devices over the next two to three weeks while order processing is restored. Competing manufacturers should expect increased short-term demand inquiries. IR teams in the medical device sector should treat this as a table-top prompt: can your organization maintain order processing and device traceability without its current ERP instance?
Gigia Tsiklauri is a Security Architect and founder of Infosec.ge. Get in touch if your organization handles medical device supply chain security or healthcare sector incident response.