Security News Medical device maker Boston Scientific says a cyberattack is causing a ‘global disruption’ to its operations

Brownie2019

Level 23
Thread author
Verified
Well-known
Forum Veteran
Mar 9, 2019
1,091
5,995
2,168
Germany
A cyberattack on U.S. medical device maker Boston Scientific is causing an ongoing “global disruption” to its operations, according to a federal regulatory filing on Wednesday. This is the latest health tech giant to face a cyberattack in recent weeks.

The Massachusetts-based company, which makes medically implanted devices like pacemakers and defibrillators, confirmed in a filing with the U.S. Securities and Exchange Commission that on Tuesday it began experiencing “disruptions and limitations of access” to its IT systems and business applications critical for its operations.

Boston Scientific said the cyberattack has affected its ability to ship and process orders, but has not said whether the disruption extends to customers with medical devices and implants.

When asked by TechCrunch, Boston Scientific spokesperson Chanel Hastings shared the company’s public statement but would not comment on whether patients are affected by the cyberattack, say what steps patients should take, or answer questions about the nature of the incident.

Boston Scientific treats around 48 million patients a year, according to its website.

The company’s public statement said that its investigation is ongoing and that a timeline for its restoring its systems is not yet known.

It’s not clear what caused the cyberattack at Boston Scientific. Local media in Ireland reported that thousands of staff across Boston Scientific’s campus in Cork were sent home on Tuesday after network communications were cut across the company.

Boston Scientific is the latest health technology company to have been hacked this year, including medical device makers Abbott Laboratories and Medtronic. Earlier this year, Iranian-backed hackers were blamed for a cyberattack on U.S. medical device maker Stryker, which allowed the hackers to remotely wipe tens of thousands of employee devices across its Windows network by abusing a centralized device management portal provided by Microsoft.

According to public internet records, Boston Scientific relies largely on Microsoft and Amazon Web Services for its corporate infrastructure.
 
  • Like
Reactions: Wrecker4923
What this means for patients and customers

The reported disruption appears to involve Boston Scientific’s corporate IT systems, order processing, and shipping operations. Based on the quoted filing alone, it is not possible to determine whether implanted or connected medical devices, patient monitoring, or clinical services are affected.

A disruption to business applications does not automatically mean that implanted devices are malfunctioning or that devices have been remotely accessed. However, the company’s statement also does not establish that patient-facing systems are unaffected.

Patients should:

  • Continue using prescribed medical devices normally unless instructed otherwise by their clinician or Boston Scientific.
  • Contact their healthcare provider through a known, official number if they have an urgent device concern, missed monitoring notification, or scheduled procedure affected by supply problems.
  • Use Boston Scientific’s official website or their healthcare provider for updates rather than links received through unsolicited emails or messages.
  • Avoid sharing device identifiers, medical information, passwords, or payment details with anyone claiming to be providing incident support.

Hospitals and clinics may need to verify device availability, replacement inventory, ordering status, and support contacts through established channels. They should also treat unexpected password-reset requests, invoices, shipping changes, or emergency support messages as potential phishing attempts during the disruption.

At this stage, the nature and scope of the incident remain unconfirmed publicly. The reliable conclusions are that corporate IT and operational processes have been disrupted, while the impact on patients and deployed medical devices has not been established. Further information should come from Boston Scientific, healthcare providers, regulators, or affected institutions.