West Pharmaceutical Services disclosed that it was the target of a cyberattack that resulted in data exfiltration and system encryption.
The company said that it detected a compromise on May 4th. An investigation into the incident determined that the attacker stole data from the network.
“On May 7, 2026, West Pharmaceutical Services, Inc. determined that [...it] has experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain systems were encrypted,” West Pharmaceutical Services notes in a filing with the U.S. Securities and Exchange Commission (SEC).
“Upon initial detection of an intrusion on May 4, 2026, the company promptly activated its incident response protocols, including proactively taking systems offline globally for containment purposes, notifying law enforcement, and engaging external cyber-forensic experts.”
An investigation is currently underway to determine the exact nature and scope of the incident, and the type of data the attacker stole.
