Boston Scientific disclosed Wednesday that a cyberattack is blocking its ability to process and ship customer orders globally, and the Marlborough, Massachusetts company has no timeline yet for when normal operations will resume.

The company detected the breach on Tuesday, August 25, and immediately brought in third-party cybersecurity experts to assess and contain it. What remains unknown is almost everything: the full scope of the attack, when systems will be restored, and whether the financial damage will be large enough to officially matter to investors. That last question has a technical threshold attached. Companies are required to disclose breaches that are "material," meaning significant enough to affect a reasonable investor's decision. Boston Scientific says it hasn't determined yet whether this one clears that bar.

The stock fell 5.8% in premarket trading Wednesday.

Why this hits harder than a typical IT outage

Boston Scientific makes medical devices. Its products include stents, defibrillators, and the Watchman, a small implant placed in the heart to reduce stroke risk in certain patients. When a consumer tech company loses access to its shipping systems for a few days, people wait longer for a package. When a medical device company does, hospitals and clinics may face delays in receiving equipment tied to scheduled procedures.

The company did not specify which product lines or regions are most affected, and no reports of procedure cancellations have been published yet. But the supply chain for surgical devices runs on tight coordination. A hospital ordering a device for a procedure scheduled next week has very little buffer.

This attack lands on a company already under serious strain. Boston Scientific stock had lost close to half its value this year before Wednesday's news, according to CNBC, after the company cut its profit outlook for 2026. The Watchman device missed demand expectations as more doctors began combining the implant procedure with other heart surgeries in a single visit, rather than scheduling it as a standalone case. That clinical shift sounds minor, but it compressed the volume of dedicated Watchman procedures and hit revenue in a way the company hadn't anticipated.

The revised 2026 forecast put adjusted earnings per share in a range of $3.28 to $3.32, down from a prior range of $3.34 to $3.41. Full-year sales growth guidance was cut to 5% to 6%, from a prior range of 6.5% to 8%. Second-quarter results did beat expectations, with adjusted earnings per share of $0.86 on net sales of $5.44 billion, but the guidance cut overshadowed that.

The company was already in the middle of a restructuring when the attack hit, with a plan approved earlier this summer to overhaul sourcing, logistics, and manufacturing operations, targeting completion by late 2029.

The bigger pattern here

Attacks on healthcare companies have become one of the most consequential categories of cybercrime, precisely because the downstream effects aren't just financial. The 2024 ransomware attack on Change Healthcare, a payments processor used by hospitals and pharmacies across the country, disrupted billing and prescription access for weeks and exposed the fragility of centralized health infrastructure.

Boston Scientific is a different kind of target: a manufacturer rather than a processor, but one whose physical products sit inside patients or in operating rooms. The disruption so far appears to be logistical rather than clinical, but the line between the two can close quickly when the affected company makes things that people need on a schedule.

How long the outage lasts will determine almost everything. A few days of shipping delays is painful but manageable. A prolonged disruption in a restructuring year, after a guidance cut, at a company whose stock has already lost half its value, is a different situation entirely.