Cyberattack Update - May 13, 2026
West is committed to providing timely and transparent communication to all stakeholders regarding the recent cyberattack on its network systems.
We continue to make good progress in the restoration of our systems. Our outside counsel promptly engaged Palo Alto Networks Unit 42 to support the Company’s investigation, containment, and recovery efforts, in coordination with other external experts.
Unit 42’s latest findings and assurance are included in an Incident Response Status Update Letter we received today, which can be found below. This letter affirms that the currently available evidence indicates that the identified unauthorized activity has been contained and the immediate risk to West’s operational environment has been mitigated. Additional details on Unit 42’s findings and assurance are included in the letter.
West has restored its core enterprise systems, and critical processes for shipping, receiving, and manufacturing have restarted at some sites with restoration at remaining sites ongoing. This is a 24/7 effort and top priority for our entire organization.
We remain steadfast in our commitment to supporting our customers and the critical role of our products to improving patients’ lives across the globe.
We will continue to provide timely updates as additional information becomes available.
Cyberattack Update - May 11, 2026
West is committed to providing timely and transparent communication to all stakeholders regarding the recent cyberattack on its network systems.
Following initial detection of an intrusion on May 4, 2026, West Pharmaceutical Services promptly implemented a series of technical and organizational measures to contain and mitigate the potential impact. This included the proactive shutdown and isolation of affected on-premise infrastructure for containment purposes, restriction of access to enterprise systems, and activation of further incident response and crisis management protocols, including notifying law enforcement.
West also engaged Palo Alto Networks’ Unit 42, a leading threat intelligence and incident response team, to support the Company’s investigation, containment, and recovery efforts, in coordination with other external experts and legal counsel.
The incident and the Company’s proactive response have temporarily disrupted the Company’s business operations globally. While the Company has restored its core enterprise systems, and critical processes for shipping, receiving, and manufacturing have restarted at some sites with restoration of the remaining sites in process, the timeline for a complete restoration has not yet been finalized.
West is leveraging its business continuity plans and working with our customers to mitigate risk and minimize delays wherever possible. We will continue to provide timely updates as additional information becomes available.
Notification of Cyberattack - May 7, 2026
West Pharmaceutical Services, Inc. detected a network systems issue on Monday, May 4, 2026, which was subsequently determined to be a cyberattack. West promptly activated its incident response protocols, including proactively taking its systems offline for containment, notifying law enforcement, and engaging external cyber-forensic experts. Our investigation remains ongoing, and we are working diligently to determine the nature and scope of the incident, including the extent to which any data was affected.
Our teams are making good progress with restoration efforts to return to full operations while minimizing potential impact to our customers. Core enterprise systems are now operational globally, and critical restart activities are underway and proceeding in a controlled and phased manner.
Ensuring continuity of service remains our top priority. We will continue to provide timely updates as additional information becomes available.
Middle East Conflict
West is committed to providing timely and transparent communication to all stakeholders regarding the ongoing events in the Middle East and their potential impact on our manufacturing operations at the West Israel site, as well as on our global supply chain.
At this time, we can confirm that the West Israel site, along with our key suppliers and partners, remains operational with minimal disruption to manufacturing and supply chain activities.
In addition, our primary logistics lanes across the global network remain open and operational. Our Logistics team is working closely with transportation partners and has implemented proactive risk mitigation measures to minimize potential delays. While air freight conditions remain dynamic, the actions taken to date have limited the impact on our global operations.
We appreciate your understanding as the situation continues to evolve. We will provide additional updates should any developments arise that may affect your business operations.
Last Updated March 17, 2026