Customers of Boston Scientific are still waiting on orders after a cyberattack knocked out systems at the medical device maker this week.
The company disclosed the intrusion in an SEC filing dated August 26, saying it disrupted information systems and business applications that support order processing and shipping. It has activated its incident response plan and is working with outside security experts, but gave no timeline for full restoration.
Shares fell more than 4% after the disclosure. No attacker has claimed the intrusion, and the company has not said whether any data was taken.
The Massachusetts-based firm is one of the largest makers of devices for minimally invasive procedures, from stents and catheters to pacemakers and defibrillators. It employs about 59,000 people across 127 countries and posted more than $20B in net sales last year.
The incident extends a difficult year for medical technology companies, following a March outage at Stryker, a later disclosure from Medtronic, and incidents at Novo Nordisk and Xsolis.
Healthcare security teams should watch for follow-up disclosures about data theft and review third-party connections to Boston Scientific systems while the investigation continues.
