West Pharmaceutical Services disclosed a material cybersecurity attack in which an unauthorized party exfiltrated data and encrypted certain systems after the company detected an intrusion on May 4, 2026. The firm activated incident response procedures, took systems offline globally for containment, restored core enterprise systems in part, and brought in Palo Alto Networks’ Unit 42, while no ransomware group has claimed responsibility. #WestPharmaceuticalServices #Unit42 #SEC
Keypoints
- West Pharmaceutical Services detected an intrusion on May 4, 2026.
- Attackers exfiltrated data and encrypted certain systems.
- The company isolated infrastructure and notified law enforcement.
- Core enterprise systems supporting shipping and manufacturing were partially restored.
- West Pharmaceutical Services engaged Palo Alto Networks’ Unit 42 for recovery and investigation.