Breach taxonomy
Summary
West Pharmaceutical Services detected an intrusion on May 4, 2026 and determined on May 7, 2026 that it had experienced a material cybersecurity attack in which data was exfiltrated by an unauthorized party and certain systems were encrypted. The company proactively took systems offline globally for containment, notified law enforcement, and engaged external forensic experts. Per this 8-K/A, core enterprise systems and manufacturing, receiving and shipping processes were restored at all sites and the company is fully operational globally, with no unauthorized activity observed since May 5, 2026.
Tagging rationale
ThreatUnknown
Filing refers only to 'an unauthorized party' with no attribution -> UNKNOWN.