The company has not yet released a detailed timeline or a full list of affected services. However, it appears that the attack forced Boston Scientific to take certain systems offline as a precautionary measure, which in turn caused delays in some administrative and supply chain functions. The firm is reportedly working with external cybersecurity experts to contain the incident and restore normal operations. No ransomware group has publicly claimed responsibility, and no specific CVE or advisory identifier was mentioned in the report.

While the immediate impact seems limited to internal IT systems, this incident highlights the growing threat landscape for healthcare and medical device manufacturers, where operational downtime can have cascading effects. Boston Scientific has not indicated whether any third-party data was exfiltrated, and it is advising customers and partners to remain vigilant for any unusual activity related to their accounts or interactions with the company.

• Operational disruptions were reported globally.
• No evidence of compromise to patient data or medical devices has been disclosed.
• The company has engaged external incident response teams.
• No specific CVE or technical advisory has been referenced in the public statement.

Source: BleepingComputer

Is your organization in the healthcare or medical device supply chain, and how are you adjusting your vendor risk assessments in light of this incident?