FEDERALItem 1.05 · mandatoryHackingHealthcareManufacturingHealthcareData ExfiltratedDelayed DiscoveryMulti-Stage ChainPIIOtherLowActive

BOSTON SCIENTIFIC CORPORATION

bd_576500572de7e15c · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 25, 2026

Filed

Sep 8, 2026

To disclose

14 days

Affected

Not disclosed

Confidence

67%

Full breach record for BOSTON SCIENTIFIC CORPORATION →3 incidents on file

Boston Scientific filed an 8-K on Sept 8, 2026, reporting a cybersecurity incident discovered on Aug 25, 2026. The incident caused a global network outage disrupting manufacturing and shipping. The company activated incident response protocols and engaged third-party experts. No evidence of ongoing unauthorized access was found as of filing, but investigation remains active. Material financial impact expected for Q3 and FY 2026.

J jump to incidentP pin to compareR raw source

SEC clockMateriality determined Sep 7, 2026 → Filed Sep 8, 20261d ✓ SEC 4-day OK14 days discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 days

Aug 25, 2026

Begins

Aug 25, 2026

Discovered

Sep 7, 2026

Scope determined

Sep 8, 2026

Filed

vs. sector median

10 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: BOSTON SCIENTIFIC CORPORATION
norm: boston scientific
SEC CIK: 0000885725
Domain: bostonscientific.com

Name: BOSTON SCIENTIFIC CORPORATION
norm: boston scientific
SEC CIK: 0000885725
Domain: bostonscientific.com
Industry: HealthcarellmManufacturingllm

Discovered: Aug 25, 2026
Breach occurred: Aug 25, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: Sep 7, 2026
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIOther
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Activated its incident response protocols
Working, with the assistance of third-party cybersecurity experts, to investigate, assess and contain the impact of the incident and to restore operations
Changes made: Restoring many of the affected systems
Substantial restoration of its distribution network
Manufacturing has resumed across most facilities globally
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: SEC 4-day OK · 1d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
SEC
Materiality determined: Sep 7, 2026
→ Filed: Sep 8, 2026
1d cal. 4 business days SEC 4-day OK

Statute	Window	Elapsed	Threshold	Status
SEC	Materiality determined: Sep 7, 2026 → Filed: Sep 8, 2026	1d cal.	4 business days	SEC 4-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/885725/000088572526000059/bsx-20260907.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Sep 8, 2026
Raw hash: 00ea064dcadd77dcb9c131c2deb305c55a72f7c038428c8bceab8edde95ae26a

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html34.4 KB

Download View at source

Reporting entityBOSTON SCIENTIFIC CORPORATION

Victim entityBOSTON SCIENTIFIC CORPORATION

Incidentdiscovered Aug 25, 2026

Stated responseActivated its incident response protocols

ComplianceSEC 4-day OK

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing