Boston Scientific Cyberattack Hits 2026 Guidance
Boston Scientific cyberattack hit operations and shipments and an 8-K said the company likely will miss Q3 and FY2026 guidance, pressuring shares.
KEY TAKEAWAYS
- Form 8-K said the cyberattack is likely to have a material impact on Q3 and full-year 2026 results.
- The company now believes it is unlikely to meet previously issued net-sales and adjusted-EPS guidance ranges.
- Boston Scientific will update operational and financial outlook on its Q3 2026 earnings call.
HIGH POTENTIAL TRADES SENT DIRECTLY TO YOUR INBOX
Add your email to receive our free daily newsletter. No spam, unsubscribe anytime.
Boston Scientific Corporation (BSX) said in a Form 8-K dated September 8, 2026, that a cyberattack first identified on August 25 disrupted its IT systems, manufacturing, and shipments. The company said the incident is likely to have a material impact on third-quarter and full-year 2026 results, making it unlikely to meet prior guidance.
Guidance Impact and Outlook
The company determined the incident will likely affect its results of operations for both the third quarter and full year 2026. It now believes it will not meet the net sales growth and adjusted earnings-per-share (EPS) guidance ranges issued on July 29, 2026. Boston Scientific expects to recover some of the impacted revenue as operations ramp up and backlogs shrink, but the full financial impact remains unknown.
Boston Scientific plans to update its operational and financial outlook during its third-quarter earnings call scheduled for October 28, 2026. The company does not expect the incident to have a material effect on its long-term financial condition.
Operations and Recovery
Boston Scientific identified the cybersecurity incident on August 25, which involved unauthorized activity causing a network outage. This limited access to operating systems and business applications, disrupting manufacturing and the processing and shipment of customer orders.
The company activated incident-response protocols and engaged third-party cybersecurity experts, including CrowdStrike, to investigate and contain the breach. Despite the disruption, orders could still be submitted electronically through EDI and local applications and were queued for later fulfillment.
Updates show that major distribution centers were processing and shipping customer orders at or above normal levels. Sterilization facilities remained operational, and manufacturing resumed at most global sites. The disruption primarily affected on-premise systems, while cloud-based systems and applications were unaffected.
Boston Scientific reported no evidence of ongoing unauthorized access as of the September 8 filing. There was no known impact on devices not connected to its networks or increased cybersecurity risk to hospital networks using its devices. For cardiac rhythm management devices, existing remote monitoring remained available, though new activations were affected.
