The West Pharmaceutical cyberattack is a serious reminder that ransomware and data-theft incidents in the pharmaceutical supply chain can have consequences beyond IT disruption. West disclosed that unauthorized actors exfiltrated data and encrypted certain systems, forcing the company to take systems offline globally for containment. For a company involved in injectable drug packaging, vial components, containment systems, and drug delivery devices, even partial disruption to shipping and manufacturing systems can create operational and supply-chain risk.

This incident reinforces the need for strong segmentation between IT and manufacturing environments, immutable backups, privileged access controls, endpoint detection, tested recovery plans, and continuous monitoring for abnormal activity. Data exfiltration must also be treated as a long-term risk, since stolen business, employee, supplier, or customer data can later be used for extortion, fraud, or targeted attacks. No ransomware group had claimed responsibility at the time of reporting, which is almost refreshing, in the same way a smoke alarm without visible fire is “refreshing.” The damage is still real, and the investigation has to prove containment, not just announce it.

West Pharmaceutical Services disclosed that it was the target of a cyberattack that resulted in data exfiltration and system encryption. [...]

Source: West Pharmaceutical says hackers stole data, encrypted systems via Bleeping Computer — published 13 May 2026.