Article
What happened
Boston Scientific identified a cybersecurity incident on Aug. 25 that affected some of its information technology systems. The resulting network outage cut access to certain operating systems and business applications and disrupted the company’s ability to process and ship customer orders. It activated incident response protocols and brought in outside cybersecurity experts. In its first statement, the company said it did not yet know when full restoration would occur.
On Sept. 8, the company said the disruption to its remote monitoring services had been resolved. Remote activations for cardiac device implant communicators and remote monitoring for insertable cardiac monitors can resume. The company said implanted devices kept working normally throughout, programmers could still communicate with implanted devices, and patients already enrolled in remote monitoring before the disruption continued to be monitored. Its investigation is ongoing.
Why it matters for hospitals
The clinical risk appears to have been limited, but the operational exposure was real. While the disruption lasted, some newly implanted patients could not be activated for remote monitoring through the usual process, and order and shipping delays could affect procedure scheduling and inventory. Cardiology and electrophysiology programs that depend on a single vendor for devices and monitoring platforms are the most exposed.
Hospital cyber plans tend to focus on internal systems, yet many critical services now run on vendor networks that hospitals do not control.
Steps to take now
- Map dependencies. List vendors whose outage would delay procedures, monitoring or supply, starting with implantable devices, imaging and pharmacy.
- Set notice terms. Contracts should require prompt notice of incidents and regular status updates.
- Plan workarounds. Agree with clinical leaders how to manage new device patients, follow-up checks and inventory during an outage.
- Keep buffer stock. Review par levels for single-source items used in scheduled procedures.
- Exercise it. Include a key vendor outage in your next downtime drill.
Archive entry for Sep 8, 2026, added Nov. 11, 2026.