Boston Scientific said on August 28 that the cyberattack it disclosed two days earlier has stopped product manufacturing along with order processing and shipping. The company can still take orders electronically and place them in a queue for future fulfillment. It cannot process or ship them, and there is no timeline for full restoration.
The halt is concrete in Ireland. The Cork plant on Model Farm Road, about 1,200 employees, cancelled every shift scheduled to start Friday up to and including 6:30 pm, telling staff that network issues continue. Boston Scientific employs more than 7,000 people across Cork, Clonmel, and Galway, and workers have asked the union Siptu to clarify scheduling past the weekend after contradictory notices.
The sequence so far: the company detected the intrusion on August 25, filed an 8-K on August 26 saying a network outage had cut access to certain operating systems and business applications, then widened the disclosure on the 28th to include manufacturing. It says it is directing resources toward the systems with the greatest impact on customers and product delivery and has engaged external experts for restoration and recovery. Whether the incident is material to results remains undetermined.
Patient-facing systems have held. The company reports no impact on the function of implanted cardiac rhythm management devices or on their data transmission, though new remote monitoring activations are paused until systems come back.
The Stryker attack in March ran the same course, with ordering, manufacturing, and shipping down together, and it cost that company a material quarter. An order sitting in a queue becomes a backorder the moment a hospital needs the product, and cardiac device supply does not substitute easily. The next disclosure to watch for is a restart date.