Convatec is a global medical products and technologies company, founded in 1978 and operating in around 90 countries. Its portfolio centers on chronic condition management across four clinical domains: Advanced Wound Care, Ostomy Care, Continence Care, and Infusion Care. Annual revenue exceeds $2 billion, backed by a workforce of more than 10,000 employees. The company is publicly listed and headquartered in the UK.
For security professionals, the threat model is significant. Medical device manufacturers and healthcare technology firms are high-value targets for ransomware, IP theft, and supply chain compromise. Convatec's products are directly used in patient care, meaning a breach has potential consequences beyond data loss - it could affect device integrity, clinical workflows, and patient safety across nearly 90 national markets with varying regulatory regimes.
Security work here likely spans IT and OT environments, given the intersection of manufacturing operations, connected medical devices, and global enterprise systems. The regulatory surface is broad: GDPR, FDA requirements, and healthcare-specific frameworks in multiple jurisdictions. Protecting sensitive patient data and maintaining the integrity of products used in chronic condition management is the core mission.
