Skip to content
West Pharmaceutical Services hit by ransomware attack | brief

West Pharmaceutical Services hit by ransomware attack | brief

Scworld May 13, 2026

Per Security Week, Pennsylvania-based West Pharmaceutical Services is working to recover from a ransomware attack that occurred on May 4, impacting its global operations and leading to a proactive shutdown of affected systems.

The pharmaceutical packaging and delivery systems manufacturer experienced a ransomware attack on May 4, prompting the company to proactively shut down and isolate its on-premise infrastructure. This containment measure disrupted business operations worldwide. West Pharmaceutical Services engaged Palo Alto Networks' Unit 42 for incident response and system restoration. While core enterprise systems have been restored and some critical processes have restarted, a complete restoration timeline is not yet finalized.

The attackers reportedly exfiltrated data before deploying ransomware, and the company is investigating the extent of the compromised data. Although the specific ransomware group has not been identified, West Pharmaceutical Services has taken steps to mitigate the risk of data dissemination. The company has not yet determined if the attack will have a material financial impact.

Source: Security Week