Boston Scientific’s stock fell 4.6% to $47.57 on Wednesday after the medical device maker disclosed a cybersecurity incident that disrupted global order processing and shipping, disclosed on August 25.
The company’s shares remain 12% above their 52-week low of $42.20, though the stock has declined 55% year-to-date. The cyber event compounds existing headwinds in its WATCHMAN and electrophysiology businesses, where 2027 revenue growth forecasts were reduced to 4% from 8%, and WATCHMAN estimates were revised to a decline of 5%.
The selloff follows a pattern observed in the medtech sector after cyber incidents. Stryker Corp’s March 11, 2026 cyberattack—linked to Iranian actors—disrupted global operations and reduced first-quarter revenue by roughly 5%. While Stryker’s second-quarter earnings beat estimates with adjusted EPS of $3.69 versus $3.49 expected, shares still fell 9.2% after-hours as management narrowed full-year guidance. Remediation costs weighed on operating margins, though tariff refunds provided partial offset.
Five months after the incident, Stryker’s stock traded at $332, 17% below its 52-week high of $401.99. Analysts noted that Inari supply-chain backorders took approximately six months to normalize, with expectations for resolution by the end of the third quarter. Wolfe Research downgraded Stryker to Peer Perform, citing a "demanding second-half setup" post-cyber, while Citizens cut its price target from $440 to $400 while maintaining an Outperform rating.
Analysts covering Boston Scientific offered a mixed response. Stifel reiterated its Buy rating with a $60 price target, stating it "would not view a cybersecurity-related guidance change as reflecting negatively on fundamental performance or longer-term outlook." TD Cowen maintained a Buy rating at $56, describing the estimate reset as creating a "favorable risk/reward." Argus downgraded the stock to Hold, citing existing challenges in WATCHMAN and electrophysiology that the cyber event has exacerbated.
Sector precedents suggest initial declines of 3% to 5% on disclosure, followed by 2 to 4 weeks of elevated volatility as the scope of the breach is assessed. Revenue impacts typically range from 3% to 5% in the affected quarter, with remediation costs further pressuring margins. Operational normalization generally takes four to six months, according to industry patterns.
