Summary
- Boston Scientific has resumed most global manufacturing and restarted European order processing and shipping.
- NHS Supply Chain says backlogged orders will take time to clear and some products may remain intermittently unavailable.
- A Major Incident Team remains in place with NHS England and the Department of Health and Social Care.
Boston Scientific has restarted most manufacturing and resumed shipments from its European distribution centre, but NHS organisations are still dealing with backlogged orders and intermittent product availability following the medical-device manufacturer’s cyberattack.
Boston Scientific has resumed manufacturing across most of its global facilities and says additional capabilities continue to return. All sterilisation facilities are operating, while the company’s European Distribution Centre has restarted processing and shipping customer orders.
The 7 September update from NHS Supply Chain marks a significant improvement from the earlier disruption, when automated ordering, picking, packing, and shipping processes were unavailable and only limited manual fulfilment was possible.
Recovery has not yet removed the operational consequences. NHS Supply Chain said it will take time for Boston Scientific to clear queued orders and warned that some products could remain intermittently unavailable while services return to normal.
A Major Incident Team remains in place to manage the disruption, with NHS Supply Chain working alongside NHS England, the Department of Health and Social Care, and the National Supply Disruption Response team.
The continuing backlog demonstrates the difference between restoring technology and restoring a physical supply chain. When automated fulfilment is unavailable for several days, orders accumulate across distribution centres and hospitals. Bringing a system back online does not immediately remove the queue created while it was unavailable.
Medical-device supply creates additional complexity because substitute products cannot always be treated as interchangeable commodities. Clinical teams may need information about compatibility, procedural differences, local stock, and alternative devices before changing from an established product.
NHS Supply Chain has been preparing alternative-product information and routes for trusts dealing with urgent requirements around planned procedures. Those measures remain relevant while stock availability is inconsistent.
The latest update also indicates that the cyber response is continuing after operational systems have restarted. NHS Supply Chain says no further evidence of unauthorised activity has been identified since the date of the attack, while work continues to provide assurance that there are no ongoing cyber risks.
That statement does not establish the original intrusion route, responsible actor, or full technical scope. Boston Scientific has not publicly attributed the attack or provided a detailed explanation of how its systems were compromised.
The recovery phase nevertheless provides a clearer picture of the operational impact. Manufacturing, sterilisation, order processing, and European distribution all sit in the chain between a medical-device supplier’s internal technology and the availability of products inside hospitals.
A cyber incident at the manufacturer can therefore continue to affect healthcare after compromised or unavailable systems are technically restored. Backlogs still have to move through warehouses, transport, procurement processes, and clinical inventory before normal service is restored at the end of the chain.
The disruption has also required public-sector coordination beyond an ordinary supplier relationship. The continuing Major Incident Team shows how a private manufacturer’s cyberattack can become an NHS resilience problem when the affected products support patient care.
The immediate exposure has now changed. Boston Scientific is again producing and shipping equipment, reducing the risk of a prolonged halt in supply. The remaining question is how quickly the accumulated backlog can be worked down and whether intermittent shortages can be absorbed without disrupting scheduled clinical activity.
NHS Supply Chain says further updates will be provided as the supplier’s recovery continues. Until queued orders and product availability return to normal, the incident remains an operational supply problem rather than a closed technology event.
