West Pharmaceuticals discloses material cyberattack; data exfiltrated, systems encrypted on May 4 2026

WEST PHARMACEUTICAL SERVICES INC

Incident detected May 4, 2026; determined material on May 7, 2026.
Unauthorized party exfiltrated data and encrypted systems; company took systems offline globally for containment.
Engaged Palo Alto Networks' Unit 42 for investigation, containment, and recovery; law enforcement notified.
Business operations temporarily disrupted globally; core systems restored, but shipping/receiving/manufacturing restarted at some sites only.
Financial and operational impact not yet determined; investigation ongoing.

Key facts

Extracted from this filing and checked against the source text.

Cybersecurity Incidents SEC 8-K Item 1.05 confidence 0.9

WEST PHARMACEUTICAL SERVICES INC disclosed a cybersecurity incident: Cybersecurity attack involving data exfiltration by an unauthorized party and encryption of certain systems. Impact: Temporarily disrupted business operations globally; core enterprise systems restored; shipping, receiving, and manufacturing restarted at some sites with restoration of remaining sites in process; material impact on financial condition and results of operations not yet determined. Company determined it material. Discovered 2026-05-04.

Nature: Cybersecurity attack involving data exfiltration by an unauthorized party and encryption of certain systems
Impact: Temporarily disrupted business operations globally; core enterprise systems restored; shipping, receiving, and manufacturing restarted at some sites with restoration of remaining sites in process; material impact on financial condition and results of operations not yet determined
Materiality: determined material
Discovery: 2026-05-04

Exact text from the filing

On May 7, 2026, West Pharmaceutical Services, Inc. (the “Company”) determined that the Company has experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain systems were encrypted.

View on SEC.gov

1 cybersecurity incidents filed in the last 30 days. Browse all cybersecurity incidents →

WEST PHARMACEUTICAL SERVICES INC filing history →

Source: SEC EDGAR

accession 0000105770-26-000068

view filing index on sec.gov

view primary document

Machine-readable: JSON · Markdown · Plain text

This headline and bullets were generated automatically by deepseek-v4-flash:cloud@v2 from the public filing. Read the source on SEC.gov before relying on any specific claim. Not investment advice. See methodology for how this pipeline works.