Boston Scientific says cyber incident likely to materially affect quarterly and annual results

Boston Scientific (NYSE: BSX) has moved from reporting an operational disruption to warning of a material earnings-period impact. In an Item 1.05 update dated September 7 and filed September 8, the company said the August 25 cybersecurity incident is likely to materially affect third-quarter and full-year 2026 results of operations, making its July 29 net sales growth and adjusted earnings per share guidance ranges unlikely to be met.

Restoring operations does not settle the revenue impact

The incident impaired Boston Scientific's ability to manufacture devices and process and ship customer orders. That makes the pace of recovery relevant to both customer order fulfillment and the timing of revenue: restarting facilities is one step, while fulfilling accumulated orders and reducing backlogs takes additional work.

Boston Scientific said its distribution network was substantially restored, with major distribution centers processing and shipping at or above normal operating levels. Sterilization facilities were operational, and manufacturing had resumed across most facilities globally. Those milestones indicate progress, but the company was still restoring affected systems and could not specify when full operational recovery would be achieved.

Guidance is the new financial signal

The material-impact determination is the central change from the initial disclosure filed August 26, a day after the incident was identified. Unauthorized activity on certain systems caused a network outage that limited access to operating systems and business applications and disrupted global operations. This update connects that disruption to the company's expected quarterly and annual performance.

Boston Scientific now considers its previously issued net sales growth and adjusted earnings per share guidance ranges unlikely to be met for both periods. The update does not quantify a dollar loss or the size of the expected guidance shortfall. Some affected revenue may be recovered as operations ramp up, orders are fulfilled and backlogs shrink, but the full financial impact remains unknown.

The company separately said it does not expect a material impact on its long-term financial condition. That assessment addresses a different question from the near-term effect on results of operations; it does not remove the warning about this year's guidance.

Investigation and the next checkpoint

As of the update, Boston Scientific had identified no evidence of ongoing unauthorized access. Its investigation remained open, with third-party cybersecurity experts assisting investigation, containment and restoration efforts. The absence of identified ongoing access does not establish that operational recovery is complete.

The next stated financial checkpoint is the third-quarter results and business highlights call on Wednesday, October 28. The company said that update would incorporate the anticipated incident impact. The useful questions then are how much disruption is reflected in the outlook, how far order backlogs have been reduced and how much affected revenue can be recovered.