WST · West Pharmaceutical Services, Inc.

West Pharmaceutical Services, Inc. experienced a material cybersecurity attack detected on May 4, 2026, and formally determined material on May 7, 2026, triggering mandatory SEC disclosure under Item 1.05. The breach involved unauthorized data exfiltration and ransomware-style encryption of systems, prompting immediate global shutdowns of affected infrastructure to contain the threat. The company engaged leading external support from Palo Alto Networks’ Unit 42 alongside other forensic experts and legal counsel, while notifying law enforcement, demonstrating a robust initial response. Core enterprise systems have been restored, with partial resumption of critical manufacturing, shipping, and receiving at select sites, though full operational normalization lacks a timeline. This incident poses significant investor risks including potential data leakage liabilities, regulatory scrutiny, customer disruptions in the highly regulated pharmaceutical services sector, and indeterminate financial consequences ranging from recovery costs to lost revenue. Ongoing investigation limits visibility into data scope, but proactive mitigation efforts aim to curb further harm. Investors should monitor updates via the company's website statement (Exhibit 99.1) and future filings for resolution progress and impact quantification.