Boston Scientific Corp discloses a cybersecurity incident (SEC 8-K, September 2026)
As previously disclosed in a Current Report on Form 8-K filed on August 26, 2026 with the Securities and Exchange Commission, on August 25, 2026, Boston Scientific Corporation (the “ Company ”) identified a cybersecurity…
What happened
- As previously disclosed in a Current Report on Form 8-K filed on August 26, 2026 with the Securities and Exchange Commission, on August 25, 2026, Boston Scientific Corporation (the “ Company ”) identified a cybersecurity incident that affected certain of its information technology systems and resulted in a global disruption to the Company’s operations.Form 8-K Item 1.05, Boston Scientific Corp, filed 2026-09-08
- Upon detection, the Company activated its incident response protocols, and since then has been working, with the assistance of third-party cybersecurity experts, to investigate, assess and contain the impact of the incident and to restore operations.Form 8-K Item 1.05, Boston Scientific Corp, filed 2026-09-08
- The incident involved unauthorized activity on certain of the Company’s systems that resulted in a network outage affecting access to certain operating systems and business applications, which impacted the Company’s ability to manufacture as well as process and ship customer orders.Form 8-K Item 1.05, Boston Scientific Corp, filed 2026-09-08
- As of the date of this Current Report on Form 8-K, the Company has not identified evidence of ongoing unauthorized access to its systems.Form 8-K Item 1.05, Boston Scientific Corp, filed 2026-09-08
The failure pattern
Watch the pattern: Insufficient segmentation lets a foothold spread
Related standards
CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.
Building something similar?
Describe your design and see every precedent that applies, with safeguards you can hand to your coding agent.
Incidents with the same pattern
Ransomware shuts down CDK Global's dealer-management platform for about 15,000 dealerships (2024)
Ransomware forced shutdown of core dealer management SaaS platform, halting sales, financing, and parts ordering for 15,000 auto dealerships.
Cyberattack disrupts Johnson Controls' internal IT infrastructure (2023)
Ransomware encrypted virtual hypervisors; halted manufacturing and billing operations incurring $27M in direct remediation costs.
Cyberattack takes Clorox IT systems offline and forces manual order processing (2023)
Ransomware encrypted internal ordering databases; lack of decoupled offline queue forced multi-week manual processing and inventory write-downs.
Access to the Starwood reservation network since 2014 exposes Marriott guest records (2018)
Legacy Starwood database left unsegmented following acquisition; attackers extracted passport numbers and encrypted payment cards of 383M guests.
Major entertainment company hit by an SMB worm with destructive wiper components (2014)
US-CERT alert TA14-353A describes an SMB worm tool used against a major entertainment company that spreads by brute-forcing Windows SMB shares.
Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, September 2026)
On August 28, 2026 , Park Dental Partners, Inc. (“we” or the “Company”) identified unauthorized access to its computer network.