WEST PHARMA CONFIRMS DATA BREACH AND SYSTEM ENCRYPTION
SECURITY DESK■ 1 MIN READ
WED, MAY 13, 2026■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
West Pharmaceutical Services disclosed a cyberattack involving data theft and system encryption. The incident affects the drug delivery and medical device manufacturer.
West Pharmaceutical Services confirmed it fell victim to a ransomware attack that resulted in both data exfiltration and encrypted systems.
The company, which supplies prefilled syringes, vials, and injection devices to pharmaceutical manufacturers, did not immediately disclose the scope of compromised data or the number of affected systems.
Cyberattacks on pharmaceutical supply chain companies pose significant risks due to their role in drug manufacturing and distribution. West Pharmaceutical is a major supplier to the industry, making the breach potentially consequential for multiple healthcare organizations and patients.
The company did not name the threat actor responsible or indicate whether ransom was demanded. Ransomware-as-a-service gangs increasingly target healthcare and pharmaceutical companies for their critical infrastructure status and perceived ability to pay.
West Pharmaceutical said it is working with cybersecurity experts and law enforcement to investigate the incident and restore systems.
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
YESTERDAY— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
YESTERDAY— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
YESTERDAY— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
YESTERDAY— Security Desk