F500 Pharma & Biotech · Medical Products and Equipment · Data breach
Boston Scientific
Headline
MATERIAL 2026 CYBERSECURITY INCIDENT: on August 25, 2026 Boston Scientific identified unauthorized activity on its systems that caused a global network outage disrupting manufacturing and order shipping…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
MATERIAL 2026 CYBERSECURITY INCIDENT: on August 25, 2026 Boston Scientific identified unauthorized activity on its systems that caused a global network outage disrupting manufacturing and order shipping; in a September 8, 2026 Form 8-K (Item 1.05) it said the incident is likely to have a material impact on its third-quarter and full-year 2026 results. The filings do not say whether personal or patient data was taken; the investigation was ongoing. Separately, Boston Scientific makes implantable cardiac devices, and implantables raise the sharpest version of the connected-device question in this tracker: a pacemaker or defibrillator can transmit data from inside a patient's body to a manufacturer's remote-monitoring platform, and the patient cannot switch vendors or meaningfully renegotiate consent after implantation. The governing framework is FDA device regulation rather than consumer privacy law. No finding is asserted - this is a structural note about where the regulatory perimeter sits.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
No privacy lawsuit confirmed this pass; see headline for the August 2026 cybersecurity incident disclosed under SEC Item 1.05 (personal-data impact not disclosed); as a primarily B2B/institutional pharmaceutical, medical-device, or lab-equipment manufacturer, most individual consumer exposure is INDIRECT (as a patient using a device/drug prescribed by a provider) rather than through a direct account relationship — recommend checking specifically for any patient-assistance/copay program or connected-device app this company operates, since those are the points where direct consumer data collection would occur.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy See Boston Scientific's own published privacy policy | Not fetched yet | NOT CONFIRMED |
| Terms of service See Boston Scientific's own published terms of service | Not fetched yet | NOT CONFIRMED |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.