Back to all incidents

West Pharmaceutical Services

westpharmaceuticalservices.com
CONFIRMED

Official SEC Form 8-K Item 1.05 disclosure filed by West Pharmaceutical Services regarding a material cybersecurity incident.

Observable Status CONFIRMED
Industry / Sector Technology & Commercial
Incident Classification Material Cybersecurity Incident
Attributed Threat Actor Unattributed / Unknown
Affected Population Scope Under Audit
First Seen 2026-05-20
Last Updated 2026-05-20
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

80% CONFIDENCE
1. Primary Authority CONFIRMED BY REGULATOR Base weight: 65%
2. Evidence Specificity +15% Statutory Filing Verified
3. Corroboration Curve +0% 1 independent domain
4. Timeline & Staleness +0% 2 milestones logged
Corroborated Source Domains:
sec.gov
STATUTORY REGULATORY DISCLOSURES

Official Regulatory Filings & Legal Compliance Records

2 Verified Statutory Filings
Regulatory Ground Truth Standard: The disclosures below represent formal statutory filings and enforcement records submitted to government regulatory authorities (SEC, State Attorneys General, HHS OCR, FTC, FCC, EU/UK DPAs). In accordance with repository principles, this data is captured exactly as filed by the reporting entity and is never modified, overridden, or synthesized by AI models.
SEC

Form 8-K Item 1.05

CONFIRMED BY REGULATOR
Docket / Accession ID 0000105770-26-000077
Statutory Filing Date 2026-05-20
Disclosed Impact Scope Under Audit
Evidence Standard Regulatory Ground Truth
Statutory Filing Details & Summary (Preserved As Filed):

Item 1.05 Material Cybersecurity Incidents.

As previously disclosed in the Original Report, the Company determined on May 7, 2026 that the Company had experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain systems were encrypted. Upon initial detection of an intrusion on May 4, 2026, the Company promptly activated its incident response protocols, including proactively taking systems offline globally for containment purposes, notifying law enforcement, and engaging external cyber-forensic experts.

Remediation efforts have since progressed, with core enterprise systems restored in addition to critical processes for manufacturing, receiving and shipping restarted at all sites. The Company is now fully operational across its manufacturing, supply chain and commercial sites globally. While the Company's investigation into the nature and scope of the incident is continuing, including with respect to the extent of the data affected, no unauthorized activity or access is ongoing or has been observed since May 5, 2026.

Based on the investigation to date and information currently available, the Company believes that the incident has not had, and is not reasonably likely to have, a material impact on the Company's 2026 second-quarter and full-year financial guidance.

Forward-Looking Statements

This Current Report on Form 8-K contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995, including, but not limited to, statements regarding the Company's expectations regarding future events, financial guidance, actions or performance related to the cybersecurity incident, including the results of the Company's ongoing investigation thereof and the impact of the cybersecurity incident on the Company, and its financial or operational performance. Forward-looking statements may be identified by words such as "believe," "expect," "intend," "estimate," "plan," "anticipate," "project," "forecast," "guidance," "target," "may," "will," "continue" and similar expressions.

These statements are based on current expectations and assumptions and are subject to risks and uncertainties that could cause actual results to differ materially from those expressed or implied by such forward-looking statements. For additional information regarding these risks as well as other risks, uncertainties and factors that could affect our forward-looking statements, please refer to Part I Item 1A, entitled "Risk Factors," of the Company's most recent Annual Report on Form 10-K and any amendments thereto, as well as the Company's most recently filed Quarterly Reports on Form 10-Q and other filings the Company makes with the Securities and Exchange Commission.

Forward-looking statements speak only as of the date of this Current Report on Form 8-K. Except as required by law or regulation, West Pharmaceutical Services, Inc. undertakes no obligation to update or revise any forward-looking statements, whether as a result of new information, future events or otherwise.

View Official Regulatory Filing Document https://www.sec.gov/Archives/edgar/data/105770/000010577026000077/0000105770-26-000077-index.htm
SEC

Form 8-K Item 1.05

CONFIRMED BY REGULATOR
Docket / Accession ID 0000105770-26-000068
Statutory Filing Date 2026-05-11
Disclosed Impact Scope Under Audit
Evidence Standard Regulatory Ground Truth
Statutory Filing Details & Summary (Preserved As Filed):

Item 1.05 Material Cybersecurity Incidents.

On May 7, 2026, West Pharmaceutical Services, Inc. (the "Company") determined that the Company has experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain systems were encrypted. Upon initial detection of an intrusion on May 4, 2026, the Company promptly activated its incident response protocols, including proactively taking systems offline globally for containment purposes, notifying law enforcement, and engaging external cyber-forensic experts. The Company's investigation into the nature and scope of the incident remains ongoing, including the extent of the data affected. The Company has taken steps intended to mitigate the risk of dissemination of the exfiltrated data.

The incident and the Company's proactive response have temporarily disrupted the Company's business operations globally. While the Company has restored its core enterprise systems, and critical processes for shipping, receiving, and manufacturing have restarted at some sites with restoration of the remaining sites in process, the timeline for a complete restoration has not yet been finalized.

The incident's material impact on the Company's financial condition and results of operations, if any, has not been determined at the time of filing.

Forward-Looking Statements

This Current Report on Form 8-K contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995, including, but not limited to, statements regarding the Company's expectations regarding future events, actions or performance related to the cybersecurity incident, including the results of the Company's ongoing investigation thereof and the impact of the cybersecurity incident on the Company, and its financial or operational performance. Forward-looking statements may be identified by words such as "believe," "expect," "intend," "estimate," "plan," "anticipate," "project," "forecast," "guidance," "target," "may," "will," "continue" and similar expressions.

These statements are based on current expectations and assumptions and are subject to risks and uncertainties that could cause actual results to differ materially from those expressed or implied by such forward-looking statements. For additional information regarding these risks as well as other risks, uncertainties and factors that could affect our forward-looking statements, please refer to Part I Item 1A, entitled "Risk Factors," of the Company's most recent Annual Report on Form 10-K and any amendments thereto, as well as the Company's most recently filed Quarterly Reports on Form 10-Q and other filings the Company makes with the Securities and Exchange Commission.

Forward-looking statements speak only as of the date of this Current Report on Form 8-K. Except as required by law or regulation, West Pharmaceutical Services, Inc. undertakes no obligation to update or revise any forward-looking statements, whether as a result of new information, future events or otherwise.

View Official Regulatory Filing Document https://www.sec.gov/Archives/edgar/data/105770/000010577026000068/0000105770-26-000068-index.htm

Technical Forensic Briefing

Incident Overview

West Pharmaceutical Services, within its operating sector, has been subject to a cybersecurity incident disclosed to federal securities regulators. Ground-truth telemetry indicates the event prompted statutory disclosure under SEC cybersecurity reporting mandates.

Official SEC Form 8-K Item 1.05 disclosure filed by West Pharmaceutical Services regarding a material cybersecurity incident.

Compromised Assets & Data Scope

The specific volume of affected customer, employee, or organizational records remains under active technical audit or disclosed in primary filings. Primary online perimeter and corporate domains include westpharmaceuticalservices.com.

Specific classes of compromised records, infrastructure, or operational systems are detailed in the official statutory filings below.

Statutory Disclosures & Compliance

  • SEC Filing: Form 8-K Item 1.05 (0000105770-26-000077) - Filing Link

Milestone Timeline (2 events logged)

2026-05-20 16:00 UTC
CONFIRMED BY REGULATOR

SEC Form 8-K Item 1.05 Disclosure

2026-05-11 16:00 UTC
CONFIRMED BY REGULATOR

SEC Form 8-K Item 1.05 Disclosure

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub