01—Abstract
Summary
Summary of the 8-K/A filed May 20, 2026. Cited figures are marked; the original filing is the authoritative source.
West Pharmaceutical Services, Inc. (WST) filed Amendment No. 1 to its Current Report on Form 8-K, amending the Original Report filed May 11, 2026, to update disclosure under Item 1.05 (Material Cybersecurity Incidents).
The Company states that on May 7, 2026 it determined it had experienced a material cybersecurity attack in which certain data was exfiltrated by an unauthorized party and certain systems were encrypted. The intrusion was first detected on May 4, 2026, after which the Company took systems offline globally for containment, notified law enforcement, and engaged external cyber-forensic experts. The Company reports that remediation has progressed: core enterprise systems have been restored, critical manufacturing, receiving and shipping processes have restarted at all sites, and the Company is now fully operational across its manufacturing, supply chain and commercial sites globally.
No unauthorized activity or access has been observed since May 5, 2026. The investigation into the nature and scope of the incident, including the extent of affected data, is continuing. Most importantly for investors, the Company believes the incident has not had, and is not reasonably likely to have, a material impact on its 2026 second-quarter and full-year financial guidance, based on information currently available.
02—Key points
Key Highlights
- Company determined on May 7, 2026 that it experienced a material cybersecurity attack involving exfiltration of certain data and encryption of certain systems.
- Intrusion first detected May 4, 2026; systems were taken offline globally for containment, and law enforcement was notified and external cyber-forensic experts were engaged.
- Core enterprise systems have been restored, and critical manufacturing, receiving and shipping processes have restarted at all sites.
- Company states it is now fully operational across its manufacturing, supply chain and commercial sites globally.
- No unauthorized activity or access has been observed since May 5, 2026; the investigation into the scope and affected data is ongoing.
- Company believes the incident has not had, and is not reasonably likely to have, a material impact on its 2026 second-quarter and full-year financial guidance.
- The filing includes only the Cover Page Interactive Data File (Exhibit 104) and no financial statements.
03—Questions
Frequently Asked Questions
What happened to West Pharmaceutical Services?
The Company experienced a cybersecurity attack in which an unauthorized party exfiltrated certain data and certain systems were encrypted. The Company determined this on May 7, 2026, after first detecting an intrusion on May 4, 2026.
How did the Company respond to the incident?
The Company activated its incident response protocols, proactively took systems offline globally for containment, notified law enforcement, and engaged external cyber-forensic experts.
Is the company's operations back to normal?
According to the filing, core enterprise systems have been restored, critical manufacturing, receiving and shipping processes have restarted at all sites, and the Company is now fully operational across its manufacturing, supply chain and commercial sites globally.
Will the incident affect West Pharmaceutical's financial guidance?
The Company believes the incident has not had, and is not reasonably likely to have, a material impact on its 2026 second-quarter and full-year financial guidance, based on the investigation to date and information currently available.
What remains unresolved?
The investigation into the nature and scope of the incident is continuing, including the extent of the data affected. The filing notes no unauthorized activity or access has been observed since May 5, 2026.
04—Continue