Today It's Boston Scientific's Turn.

Boston Scientific is the latest medical device company to be hit with a cyber attack. This morning (August 26th, 2026) Boston announced that they had been hit by a cyber attack that according to one source "heavily disrupted its global operations and completely halted its ability to process and ship orders." I also heard from an internal source that employees can't access their main corporate systems and that their production lines have been shut down. That's not necessarily a big deal. Production lines at device companies often shut down for days or even weeks at a time for various reasons. But it seems this time the shut down is a result of the cyber attack.

So far (5:45PM CST) Boston hasn't said if implanted device security was affected. A spokesperson was asked specifically if patient's implanted devices were secure and the spokesperson declined to comment. Knowing what I know about device security I would bet that answer had more to do with the spokesperson not having that information on hand at the time the question came in. Our devices have layers of security preventing outside hacking, so my default is believing the devices are secure until I hear otherwise. I have also heard that Boston's customers are being told to disconnect their systems from the Latitude network (Boston's remote monitoring network). Again, implanted devices are well protected. Without any further info I believe that this move is to prevent the transmission of any ransomware or malware that might have affected the Latitude connection between Boston and their clinics/hospitals. It seems like this would just be a good "just-in-case" move until Boston knows more about the extent of the cyber attack.

The other interesting point is something I've been reading about on the financial Reddit pages. Today Boston submitted an SEC form 8-K which states that their long-term financial outlook may be impacted by this attack. Their stock is down just 3.5% as of writing this, which is pretty insignificant, but from what I'm reading a form 8-K is submitted when the a company expects an event to have a long-term affect, meaning they may be planning on this shut down being longer than a couple of days. We'll see what happens in the next few days.

FYI- Boston now joins Medtronic, Abbott, and Stryker as med-tech companies that have been the targets of recent cyber attacks (all have been in 2026). Sadly this seems to be a thing that is becoming more and more prevalent. Hundreds of hospital systems, companies, small businesses, schools and colleges, even townships and municipalities have been hit in the past few years. It doesn't necessarily indicate that the cyber security at these device companies is weak. It does seem to indicate that ransomware attacks are lucrative for the hackers and that they're very very good at hacking into some systems that cause great chaos. If this kind of thing interests you, there's a terrific podcast by the BBC called "Cyber Hack". Every season is super interesting, but season 4 is about these kinds of ransomware attacks.