Boston Scientific discloses 'global disruption' in ongoing cyberattack

Medical device maker Boston Scientific's global operations have been disrupted by an ongoing cyberattack, the company disclosed on Wednesday. According to an SEC filing, the cybersecurity incident" affecting its IT systems started on Tuesday, and resulted in a global disruption to the company's operations." Upon detecting the digital intruders, the company began an investigation with third-party infosec experts who are working to contain the threat, the filing says. The medtech firm did not immediately respond to The Register's inquiries, including if this was a ransomware infection and what data, if any, the criminals stole after breaking into the IT systems. The incident has caused, and is expected to continue to cause, disruptions and limitations of access to certain of the company's information systems and business applications that support aspects of the Company's operations, including the ability to process and ship customer orders," Boston Scientific reported to federal regulators. The company doesn't have a timeline for full restoration, and noted the full scope, nature and impacts, including operational and financial impacts" of the cyberattack remain unknown. The news did, however, send Boston Scientific shares spiraling down more than 4% on Wednesday morning. At press time, none of the usual suspects had claimed responsibility for the attack. In recent months, both ransomware/extortion gangs and government-backed hackers have disrupted other medtech firms' operations and stolen sensitive data. In March, Stryker was hit by a cyber crew with ties to Iran's intelligence agency, causing a global network outage at the company. A month later, medical-device maker Medtronic disclosed a cyberattack in a filing with federal regulators. Notorious data-theft-and-extortion group ShinyHunters claimed to be behind this intrusion, and the company in July warned patients that their names, contact details, dates of birth, Social Security numbers, and health information was stolen in the breach. (R)