West Pharma Fully Operational Post-Cyberattack; 2026 Forecast Unchanged

• West Pharma detected the intrusion on May 4 and confirmed a material cybersecurity attack on May 7 involving stolen data and locked systems, prompting the company to take systems offline globally and engage external cyber experts
• The company has restored core systems and restarted manufacturing, receiving, and shipping at all locations, with analysts at Evercore ISI noting the company will leverage flex capacity and 24/7 operations to offset any disruption
• West Pharma joins other major medical device companies hit by recent cyberattacks, including Stryker and Intuitive Surgical in March and Medtronic in April, highlighting ongoing cybersecurity risks in the healthcare equipment sector

West Pharmaceutical Services Restores Operations Following Cyberattack

West Pharmaceutical Services announced Wednesday it has fully restored operations across all sites following a cybersecurity incident earlier in May, with no expected material impact on its 2026 financial outlook.

Key Timeline and Facts:

• May 4: Initial intrusion detected
• May 7: Confirmed material cybersecurity attack involving data theft and system lockdowns
• Company took systems offline globally and engaged law enforcement and external cyber experts
• No further unauthorized access detected as of the announcement

Operational Response:

West Pharma has successfully restored core systems and restarted critical processes including manufacturing, receiving, and shipping at all locations. The company is now fully operational across manufacturing, supply chain, and commercial sites globally. Management plans to leverage flex capacity and 24/7 operations to offset any disruption.

Financial Impact:

The incident is not expected to materially impact second-quarter or full-year 2026 forecasts. Evercore ISI analysts expressed encouragement over the company's ability to quickly resume normal operations.

Ongoing Investigation:

West Pharma continues investigating the breach, including assessing the extent of affected data. The review remains in progress.

Industry Context:

This incident joins a series of recent cyberattacks on medical device manufacturers. Stryker and Intuitive Surgical reported similar incidents in March 2026, while Medtronic disclosed a cybersecurity breach in April 2026, highlighting growing cybersecurity vulnerabilities in the healthcare sector.

The quick operational recovery and maintained financial guidance suggest effective incident response and business continuity planning by West Pharmaceutical Services.