West Pharmaceutical Services Reports Data Exfiltration and System Encryption in Cyberattack
Summary
West Pharmaceutical Services reported unauthorized data exfiltration, encrypted systems and global operational disruption. Core enterprise systems are restored, but recovery at some sites remains ongoing; the financial impact is undetermined.
Key points
- The company said it determined on May 7, 2026, that it had experienced a material cybersecurity attack; it detected the intrusion on May 4.
- West reported that an unauthorized party exfiltrated certain data and encrypted certain systems. The extent of affected data remains under investigation.
- The company took systems offline globally for containment, notified law enforcement and engaged external cyber-forensic experts, including Palo Alto Networks’ Unit 42.
- The incident and response temporarily disrupted global operations. Core enterprise systems are restored, and shipping, receiving and manufacturing have restarted at some sites.
- Restoration at remaining sites is ongoing, with no complete-restoration timeline finalized. The financial impact, if any, had not been determined at filing.
Article Details
- Victim Organization
- West Pharmaceutical Services, Inc.
- Incident Type
- Cyberattack involving unauthorized data exfiltration and encryption of certain systems
- Disclosure Date
- 2026-05-11
- Operational Impact
- Business operations were temporarily disrupted globally. Core enterprise systems were restored, and shipping, receiving, and manufacturing had restarted at some sites; restoration at remaining sites was ongoing.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed