Boston Scientific posted its fourth newsroom update on the ongoing cyberattack at 8:25 pm ET on August 30 and drew its first containment line. The company sees no indication of unauthorized activity in its environment related to the incident since August 25, the day it detected the intrusion. It expects to begin shipping some products this week. A date for full restoration is still not set.
The updates also bound the damage by architecture. The incident affected certain on-premise systems, including the operating systems and business applications behind manufacturing, order processing, and shipping. Cloud-based systems and applications were untouched and remain operational. Boston Scientific confirmed it is working with CrowdStrike and other third-party cybersecurity experts on the investigation and recovery, the first time it has named the firm involved.
Order intake continues through EDI, local applications, and GHX, with orders held in a queue for later fulfillment. Implanted cardiac rhythm management devices keep functioning and transmitting data. The workarounds sit at the edges of the monitoring system: new remote monitoring communicators cannot be activated, new insertable cardiac monitors cannot pair to a patient's phone, and the company points clinics to its Clinic Assistant app for ICM checks in the meantime.
The disclosure record now runs six days: detection on August 25, an 8-K on August 26, a manufacturing stop disclosed on August 28, and newsroom updates on four consecutive evenings from August 27 through August 30. The company says its confidence in restoring operations continues to increase, and that ordering and shipping will ramp to full capacity once the affected systems are fully operable.
Five quiet days is a real containment signal, and the on-premise versus cloud boundary will feed every medtech architecture review this fall. The harder promise is the shipping date, because a validated manufacturing line restarts slower than the server underneath it. Watch whether the partial shipping target holds this week and whether the order queue that started building on August 26 clears before hospitals begin reporting backorders.