Article
What the company has said
Boston Scientific identified the incident on Aug. 25 and said in a statement posted Aug. 26 that it affected certain information technology systems. Access to some operating systems and business applications was disrupted, including the ability to process and ship customer orders. The company activated its incident response protocols and brought in outside cybersecurity experts to assess and contain the threat. It said the timeline for full restoration is not yet known. The AHA said it is monitoring the situation.
The company makes devices used across cardiology, electrophysiology, interventional radiology, urology and other procedural specialties. Many hospitals stock its products through consignment or just-in-time replenishment, which keeps inventory lean and makes a shipping halt felt quickly.
A familiar pattern
Earlier this month, AHA leadership warned that criminal groups and state-sponsored hackers have stepped up attacks on health care vendors, and that a hospital’s security depends on the wider network of partners it relies on. A supplier outage does not need to touch a hospital’s own systems to cancel cases. When orders cannot be placed or shipped, the operating room schedule becomes the point of failure.
Steps for the next 72 hours
- Count what is on the shelf. Have supply chain leaders report days on hand for Boston Scientific items by procedure area, including consigned stock that may not appear in your own system.
- Flag the cases at risk. Ask perioperative and procedural leaders to identify scheduled cases over the next two weeks that depend on those items.
- Line up clinical alternatives. Work with physician leaders and value analysis committees to confirm acceptable substitutes and any training or credentialing they require.
- Coordinate across the system. Share inventory among facilities before buying outside normal channels, and watch for price spikes or gray-market offers.
- Review connections. Ask IT security whether any interfaces or remote access links to the vendor should be limited until the company confirms containment.
- Communicate with patients. If cases must move, prioritize by clinical urgency and tell patients early.
Longer-term lessons
Many systems map critical suppliers for natural disasters and drug shortages but not for cyber events. Treat major device makers as critical vendors in business continuity plans, ask them about their own recovery capabilities, and test what a two-week shipping stop would mean for your service lines.
Archive entry for Aug 26, 2026, added Nov. 11, 2026.