West Pharmaceutical Services (NYSE: WST), a Pennsylvania-headquartered manufacturer of drug-delivery components for global pharmaceutical supply chains, filed a Form 8-K with the US Securities and Exchange Commission (SEC) on Thursday 7 May 2026 disclosing a material cybersecurity incident detected on Monday 4 May12. Palo Alto Networks Unit 42, the vendor's forensic-response team, was engaged and subsequently confirmed both data exfiltration and full-system encryption. West's global operations including shipping, manufacturing, and shared services went offline. No ransomware group had publicly claimed the intrusion at the time of filing.
By the filing date, core enterprise systems had been restored and manufacturing was resuming site by site. Form 8-K is the SEC's current-report filing for material events; under the SEC 2023 cyber-disclosure rule, public companies must file within four business days of determining a cybersecurity incident is material. West has now established a worked example of the disclosure timeline running cleanly through a live response engagement, with the determination of materiality preceding any attribution.
The disclosure pattern matters because Stryker filed an 8-K/A on 10 April 2026 disclosing the Iran-linked Handala device-wipe as material to Q1 earnings, in the same category and with the same shape: a US-listed manufacturer telling the SEC that the operational disruption was severe enough to move the quarter. Two listed manufacturers inside thirty days have now answered the open question about how the 2023 rule applies when no ransomware crew has yet claimed responsibility. For audit committees at SEC-registered manufacturers, the precedent is established: materiality is judged on operational impact, not on intelligence about the actor. NHS Supply Chain and other downstream pharmaceutical buyers will need to map their dependence on West's drug-delivery components to assess contingency.
