West Pharmaceutical Services reports encryption and data theft that paused global operations

West Pharmaceutical Services, which makes vial stoppers, syringe components and other drug packaging, disclosed on May 11, 2026 that it had suffered a material cybersecurity attack in which data was exfiltrated and systems encrypted. It detected the intrusion on May 4 and determined materiality on May 7.

Original report

West took systems offline worldwide to contain the attack, which disrupted operations globally. By filing, core enterprise systems were back and shipping, receiving and manufacturing had restarted at some sites.

May 20 amendment

Nine days later West reported full operation at all sites and no unauthorized activity observed since May 5. It said the incident was not reasonably likely to materially affect its second-quarter or full-year 2026 guidance.

Still open

The extent of the data taken was still under investigation, and West did not describe what kind of data it was.