VULNpocalypse
InformationalBreach / campaignMonitoring

Boston Scientific discloses cybersecurity incident in SEC 8-K earnings filing

Boston Scientific discloses a cybersecurity incident first reported in August 2026 in an SEC 8-K exhibit; follow official company notices for guidance.

Published
Exploitation
No, the filing does not describe any exploited vulnerability, cause or entry point

What happened

Boston Scientific Corporation discloses a cybersecurity incident in its third quarter 2026 earnings release. The release is filed as exhibit EX-99.1 to an SEC Form 8-K, according to SEC EDGAR.

The release refers to “the cybersecurity incident first reported on August 26, 2026” and to “the August 2026 cybersecurity incident.” The company lists the incident among risks that could affect its operations and financial results (SEC EDGAR).

Chairman and CEO Mike Mahoney is quoted as saying the company’s global teams responded to the incident by “working with urgency and resilience to restore operations and continue supporting customers and patients” (SEC EDGAR).

The release also says the company estimates its fourth quarter 2026 net sales will decline compared with the prior year period. It does not directly attribute that estimate to the incident (SEC EDGAR).

The following details are not confirmed in this source:

  • the nature or cause of the incident
  • the entry point
  • whether any data was accessed or taken
  • which systems were affected
  • any attacker attribution

There is no independent verification in the provided sources.

Am I affected?

Not confirmed. The filing does not name affected products, systems, customers or data types. According to the CEO’s statement, the incident affected operations (SEC EDGAR). The sources give no information on any impact on third parties.

What to do now

  1. Watch for further official statements or SEC filings from Boston Scientific that describe the scope of the incident (SEC EDGAR).
  2. If you receive a notice from Boston Scientific about the incident, follow the instructions in that notice. The current filing contains no specific guidance for customers or partners.

Sources