West Pharmaceutical restores operations after cyberattack, keeps 2026 outlook intact

West Pharmaceutical Services said its plants, shipping network and commercial operations were back online across the globe after a cyberattack that briefly forced systems offline and put one of the drug supply chain’s most specialized suppliers under pressure. The Exton, Pennsylvania-based company said production was ramping to full capacity across its manufacturing network, a reassuring signal for drug makers that depend on West for injectable packaging and delivery systems.

The incident began with an intrusion detected on May 4. In a May 7 filing with the U.S. Securities and Exchange Commission, West said it had determined the event was a material cybersecurity attack in which data was exfiltrated and certain systems were encrypted. The company took systems offline globally, notified law enforcement and brought in outside specialists, including Palo Alto Networks Unit 42 through outside counsel, to support containment and recovery.

By May 20, West said it had restored operations across manufacturing, supply chain and commercial sites and had seen no unauthorized activity or access since May 5. The company also said there was no evidence its email systems were compromised and no evidence of malicious activity targeting customers, suppliers, vendors, partners or employees. Its May 15 update said its largest site, in Eschweiler, Germany, was among the facilities where manufacturing was ramping back up.

That rapid restoration matters because West is not a niche supplier. The company says it has more than 10,000 team members across 50 sites, including 26 manufacturing facilities worldwide, and delivers more than 41 billion components and devices each year. Its products sit inside the injectable-drug supply chain used by major biologic, generic and pharmaceutical companies, so any pause in manufacturing or shipping can ripple into hospital inventories and production schedules far beyond West’s own balance sheet.

The company’s message to investors was that the disruption would not materially change its 2026 outlook. West had already raised full-year revenue and earnings guidance on April 23 after first-quarter results, following February 12 full-year 2025 results that showed net sales of $3.074 billion, up 6.3%, and operating cash flow up 15.5%. Shares rose about 2% in after-hours trading after the update, reflecting relief that the shutdown appears to have been contained quickly.

Still, the larger question for health-care infrastructure is how much transparency suppliers owe customers when attacks hit. West has not yet said whether any customer, supplier or patient data was exposed, and its continuing investigation will determine how much more of the incident becomes public. For critical packaging makers, the operational recovery is only the first test; the disclosure standard is becoming just as important.