West Pharmaceutical Services Inc. (WST) disclosed on Monday that it was hit by a material cybersecurity attack on May 7. An unauthorized party managed to exfiltrate data and encrypt some systems, the company said in an SEC filing.
The company detected the intrusion on May 4 and quickly activated its incident response protocols. It took systems offline globally to contain the breach, notified law enforcement, and brought in external cyber-forensic experts. The investigation into the scope of the attack and what data was impacted is still ongoing.
The incident temporarily disrupted global operations, but West Pharmaceutical said it has restored core enterprise systems. Shipping, receiving, and manufacturing have resumed at some sites, though restoration work at remaining sites is still underway. The company hasn't provided a timeline for full recovery and says it hasn't yet determined the financial or operational impact.
William Blair analyst Matt Larew weighed in on Tuesday, acknowledging the uncertainty. "While the disclosure no doubt introduces near-term uncertainty regarding operations and the potential resulting financial implications, we view the company's initial response as swift and comprehensive," he wrote. But he added, "Given the limited visibility into the magnitude and lasting impact of the disruption, we look for further updates from the company, including confirmation of restoration at the remaining impacted sites and additional disclosure quantifying any financial impacts."
William Blair maintains an Outperform rating on the stock, based on West being a high-quality franchise with dependable earnings and cash flow, a clear leadership position, and access to attractive end-market trends without single-product risk.
As of Tuesday's publication, West Pharmaceutical shares were down 2.02% at $315.77. Over the past month, the stock has gained about 25.2%, compared to an 8.2% rise in the S&P 500, and is up roughly 17% year-to-date versus the index's 6.9% gain.
