West Pharmaceutical Hit by Ransomware, Data Stolen

West Pharmaceutical Services has confirmed a ransomware attack that led to data theft and system encryption. The incident, which occurred on May 4, prompted the company to file a report with the Securities and Exchange Commission (SEC), according to The Record by Recorded Future.

This isn’t just a disruption; it’s a critical supply chain event for the pharmaceutical sector. West Pharmaceutical is a major supplier of drug containment and delivery systems. Any sustained operational impact here ripples across the industry, potentially delaying drug production and distribution. Attackers know this leverage point well.

For defenders, this underscores the persistent threat of ransomware moving beyond simple encryption to data exfiltration. The attacker’s calculus is clear: if you don’t pay for decryption, you might pay to prevent data leaks. CISOs must assume data exfiltration is part of every ransomware engagement and plan incident response accordingly.