BOSTON SCIENTIFIC CORP

Current report

For a discussion of important risks and uncertainties that may affect our business, financial condition and results of operations, see Item 1A. Risk Factorsin our most recent Annual Report on Form 10-K. The risk factors disclosed in our Annual Report on Form 10-K should be read in conjunction with the following updates and are supplemented by the disclosures below:

Current report

Business and Operational Risks

Current report

We rely on the proper function, availability and security of information technology systems to operate our business and cybersecurity incidents or other breaches of our systems have adversely affected, and could in the future adversely affect, our business, financial condition or results of operations.

Current report

We rely on information and operational technology systems, including technology from third party vendors, to manufacture and distribute our products, as well as to process, transmit and store electronic information in our day-to-day operations. Similar to other large multi-national companies, the size and complexity of our IT environment, coupled with advancements in artificial intelligence and sophistication of techniques, make them targets for a cyber-attack, malicious intrusion, breakdown, destruction, loss of data privacy, theft of intellectual property or other significant intentional and unlawful disruption. On August 25, 2026, we identified a cybersecurity incident that affected certain of our information technology systems and resulted in a global disruption to our operations, which impacted our ability to manufacture as well as process and ship customer orders. The cybersecurity incident caused significant disruption to our business operations and materially impacted our results of operations for the third quarter of 2026. While our operations have since been fully restored, we may not recover all of the revenue impacted by the incident and we may experience further impacts, including a potential loss of market share, or other adverse financial, legal, regulatory or reputational impacts. Civil legal claims have been filed, and we may face regulatory scrutiny related to the incident. We are unable to predict the outcome or timeline of these matters or whether additional lawsuits, inquiries or investigations may arise. We also expect to incur increased expenses in connection with our response and remediation of the incident and strengthening of our cybersecurity program. Although we have invested, and expect to continue to invest in measures to address cybersecurity threats, the techniques used in cyberattacks change frequently and may be difficult to anticipate or prevent. These measures may not be effective in preventing future cybersecurity incidents, and any such incident could have a material adverse effect on our business, financial condition or results of operations.

Current report

Further, as part of our response and remediation efforts for the incident, we used, and in any future incident may need to use, manual processes or other alternatives to our systems for a period of time. Such alternatives may be less efficient and may increase the risk of errors, delays or data integrity issues, including with respect to information collected or processed during a disruption, which could in turn adversely affect our internal processes and controls, including those supporting financial and operational reporting.

Current report

In addition, malicious actors have attempted, and may in the future attempt, to deceive employees, including through various social engineering techniques, to disclose information to gain access to our systems and/or data, and such attempts have from time to time resulted in unauthorized access to certain data, which has required, and may in the future require, us to notify affected individuals or regulators. As the methods of cyber-attacks advance, the steps that we may need to take to investigate cybersecurity incidents may not be immediately clear, and it may take a significant amount of time for such investigations to be completed and full and reliable information about such incidents to be known. Further, adverse impacts to the availability, integrity, or confidentiality of our systems or data could require us to incur additional costs to modify or enhance our systems, or to try to prevent or remediate future cyber-attacks. Modifying or enhancing our systems may result in unanticipated or prolonged disruption events, which could have a material adverse effect on our business operations and financial results.

Current report

Interruption of our supply chain or manufacturing operations has adversely affected, and could in the future adversely affect, our business, results of operations and financial condition.

Current report

Our products are designed and manufactured in technology centers around the world, either by us or third parties. In most cases, the manufacturing of any specific product is concentrated in one or a few locations. Factors such as a failure to follow specific internal protocols and procedures, results of regulatory inspections of our manufacturing facilities, equipment malfunction, environmental factors, cybersecurity incidents or damage to one or more of our facilities could adversely affect our ability to manufacture or distribute our products. The August 2026 cybersecurity incident affected certain of our technology systems and resulted in a global disruption to our operations, which impacted our ability to manufacture as well as process and ship customer orders. We may experience additional cyberattacks in the future and/or further impacts resulting from the August 2026 incident. While we resumed our operations within weeks of the incident, in the event of a future interruption to our operations, we may be unable to quickly restore operations or move to alternate means of producing affected products or to meet customer demand. As a result of any such interruptions or delays, we may experience loss of market share, which we may be unable to recapture and harm to our reputation, which could adversely affect our results of operations and financial condition.

Previous report

In addition to other information contained elsewhere in this report, you should carefully consider the factors discussed in Item 1A. Risk Factors in our most recent Annual Report on Form 10-K, which could materially affect our business, financial condition or future results.