West Pharmaceutical Services
A NYSE-listed manufacturer (NYSE: WST) of drug-delivery packaging components for global pharmaceutical supply chains, based in Exton, Pennsylvania.
Last refreshed: 20 May 2026 · Appears in 1 active topic
If a pharma supply-chain manufacturer goes dark globally, how long before drug-delivery timelines are affected?
Timeline for West Pharmaceutical Services
Filed Form 8-K on 7 May declaring a 4 May ransomware incident material; took global operations offline
Cybersecurity: Threats and Defences: West Pharma SEC 8-K on ransomware halt- What happened to West Pharmaceutical Services in May 2026?
- West Pharmaceutical Services detected a cyberattack on 4 May 2026 that encrypted systems and exfiltrated data, taking global shipping, manufacturing, and shared services offline. The company filed a Form 8-K with the SEC on 7 May declaring the incident material. Palo Alto Networks Unit 42 is the forensic responder.Source: SEC EDGAR
- What does West Pharmaceutical Services make?
- West Pharma manufactures drug-delivery components for injectable medicines, including rubber stoppers, seals, and self-injection systems. Its components are used by virtually all major pharmaceutical and biotech companies, making it a critical node in the global pharmaceutical supply chain.
- Who claimed responsibility for the West Pharmaceutical Services cyberattack?
- No ransomware group had publicly claimed responsibility at the time of the 7 May 2026 SEC filing. The attack's characteristics, simultaneous data exfiltration and encryption, are consistent with a double-extortion ransomware model.Source: SEC EDGAR
- Why is the West Pharmaceutical Services breach important for pharmaceutical supply chains?
- West Pharma supplies packaging and delivery components to virtually every major pharmaceutical manufacturer. A disruption to its manufacturing globally delays drug-delivery component supply chains; the breach took shipping, manufacturing, and shared services offline across all regions simultaneously.
Background
West Pharmaceutical Services is a NYSE-listed (WST) US manufacturer of containment and delivery components for injectable drugs, headquartered in Exton, Pennsylvania. The company supplies pharmaceutical packaging, including rubber stoppers, seals, and self-injection systems, to virtually every major global pharmaceutical manufacturer and biotechnology company, positioning it as a critical node in the pharmaceutical supply chain. Revenue for fiscal year 2025 was approximately $2.9 billion, and the company employs roughly 10,000 people across manufacturing facilities in North America, Europe, and Asia-Pacific.
West Pharmaceutical Services filed a Form 8-K with the SEC on 7 May 2026, disclosing a material cybersecurity incident detected on 4 May. The filing reported data exfiltration and full-system encryption, with operations taken offline globally across shipping, manufacturing, and shared services. Palo Alto Networks Unit 42 was engaged as forensic responder. No ransomware group had publicly claimed responsibility at the time of filing, but the operational description, simultaneous exfiltration and encryption, is consistent with a double-extortion ransomware model. Manufacturing was resuming site by site as of the filing date.
The West Pharma 8-K is significant for two reasons: it follows Stryker's April 2026 8-K/A for a Handala-related incident as a second listed CNI-adjacent manufacturer disclosing material operational disruption without ransom-group attribution; and it extends the cyber-incident disclosure baseline through existing statute (the SEC's 2023 cyber-disclosure rule) rather than new legislation. The paired filings establish that operational disruption severe enough to move the quarter crosses the SEC materiality threshold independently of public extortion activity or threat-actor attribution.