Stock Markets May 15, 2026 01:19 PM

West Pharmaceutical Services reports broad operational recovery after cyberattack

Company says manufacturing and shipping functions have largely returned to service as it continues an investigation into the May intrusion

By Nina Shah WST

West Pharmaceutical Services said it has made substantial progress restoring global manufacturing and shipping operations after a cyberattack detected in early May forced the company to take systems offline. Key production sites across multiple business segments are now operational and output is ramping, while an investigation into the incident and potential data impacts remains underway.

West Pharmaceutical Services reports broad operational recovery after cyberattack
WST

Key Points

  • Multiple manufacturing segments - HVP, Standard Packaging, HVP Delivery Devices and most West Vantage sites - are reported operational for shipping and receiving with production ramping.
  • Company detected the network issue on May 4, confirmed it as a cyberattack, activated incident response protocols and engaged external cyber-forensic experts; core enterprise systems were reported operational by May 7.
  • Primary corporate focus is continuity of supply to customers as production scales up; recovery activities are being conducted in a controlled, phased manner.

West Pharmaceutical Services provided an operational update Friday detailing its recovery work following a cyber intrusion that forced the company to take certain systems offline earlier this month. Management said it has restored a wide range of operational capabilities across its global manufacturing footprint and is focused on returning production to pre-incident levels while preserving continuity of supply to customers.

The company broke down the status of its principal segments and facilities:

  • Proprietary Products - High Value Products (HVP): All HVP sites are fully operational for shipping and receiving. Manufacturing activity is ramping across these locations, including at Wests largest HVP site located in Eschweiler, Germany.
  • Standard Packaging (Core and Seals): Standard Packaging sites are reported as fully operational for shipping and receiving, with production ramping at most facilities.
  • HVP Delivery Devices: These sites have returned to full operational status for shipping and receiving and are increasing production across all locations.
  • West Vantage: Most West Vantage sites are now operational and critical processes supporting shipping and receiving are active as manufacturing ramps up.

West reiterated that ensuring continuity of supply to customers remains the companys primary focus as it scales production back up. The update emphasizes a staged approach to restoring capabilities while monitoring customer needs.

According to the company timeline, a network systems issue was first detected on Monday, May 4, and was subsequently confirmed to be a cyberattack. West activated its incident response protocols, took affected systems offline to contain the incident, notified law enforcement and engaged external cyber-forensic experts to support the response and investigation.

By Wednesday, May 7, West reported that core enterprise systems were operational globally. The company described critical restart activities as being performed in a controlled and phased manner. The investigation into the nature and scope of the incident, including any potential impacts to data, is ongoing.

The communication provides an operational snapshot of recovery progress across manufacturing and logistics functions while leaving open the final conclusions of the forensic review. The companys public statements focus on the sequence of containment and restoration steps taken and ongoing efforts to validate the incidents full implications.


Summary: West Pharmaceutical Services says it has largely restored global manufacturing and shipping operations after a cyberattack detected on May 4. Multiple business segments report sites fully operational for shipping and receiving, with production ramping across locations, though the investigation into the incident and potential data impacts remains in progress.

Risks

  • Investigation into the incident is ongoing, including assessments of potential data impacts, leaving uncertainty about the full scope and consequences of the attack. - Impacts sectors: healthcare/medical devices, corporate IT/security.
  • Continuity of supply remains a central concern as production is still being ramped; any delays in returning to full production could affect customers dependent on Wests components and devices. - Impacts sectors: pharmaceuticals, medical device manufacturing, supply chain.
  • Core enterprise systems were restarted in a controlled, phased process, indicating that some operations were restored incrementally and could still face disruption until all phases are complete. - Impacts sectors: manufacturing operations, logistics.

More from Stock Markets

Coinbase Retreats After Regulatory Win Fails to Translate Into Certainty May 15, 2026 Lincoln International IPO Sees Strong Demand as Bookbuild Nears Close May 15, 2026 DexCom Shares Leap After Elliott Stake, $1 Billion Buyback and Ambitious 2030 Targets May 15, 2026 Institutions Pile Into AI Infrastructure Stocks in Q1 2026 May 15, 2026 Moody's Assigns Aa2 to Alphabet's New Yen Notes as Ratings Firms Affirm Debt Quality May 15, 2026