Stryker Systems Still Disrupted Five Days After Iran-Linked Cyberattack
The Iran-linked group Handala claimed the attack as retaliation, wiping thousands of devices and disrupting Stryker’s order and shipment systems, the company said.
- On March 11, 2026, Stryker, America's largest medical device maker, announced a cyberattack disrupted its global Microsoft environment and said five days later services remain disrupted.
- According to Reuters and Check Point Research, Handala, an Iran-linked hacker group, claimed responsibility, while Stryker said the incident was contained to its internal Microsoft corporate environment with no ransomware or malware detected.
- Halcyon researchers found Intune base64 payloads with remote-wipe commands that deleted data, and the attacker claims to have exfiltrated 50 terabytes.
- Electronic ordering and shipping systems are offline, so Stryker Sales Representatives and distributors manually replenish products while global manufacturing sites operate under resiliency plans.
- Under investigation, Stryker is working with third-party forensic experts and the Cybersecurity and Infrastructure Security Agency; the company believes the attack was contained but lacks a full scope and restoration timeline.
42 Articles
42 Articles
Cyberattack on Stryker delays operations at hospitalsA global outage in Stryker's IT infrastructure has blocked the operation of medical robots. Hospitals are forced to postpone operations due to an attack on the supplier.
Greece issues cyber alert as firms scan systems over Iran-linked threats
Greek shipowners and other companies are scanning their computer systems for evidence of cyberattacks after advice from the National Cybersecurity Authority, two sources said on Wednesday following incidents that have been linked to the Iran war. The authority last week sent an advisory, seen by Reuters, to security officers of shipping companies, banks and firms in the transport, telecommunications, health and energy sectors, a source at…
Stryker Hackers Allegedly Wiped Tens of Thousands of Devices Without Deploying a Single Line of Malware
No ransomware. No trojans. No custom exploits. A hacking group calling itself Stryker claims to have wiped between 40,000 and 80,000 devices across a range of targets — and they say they did it all using legitimate tools already sitting on the victims’ networks. If the claims hold up, it’s one of the most striking examples yet of how living-off-the-land techniques have matured from a stealthy persistence method into a full-blown destructive capa…
Stryker says it's restoring systems after pro-Iran hackers wiped thousands of employee devices
The hack, which brought ongoing widespread disruption to the company's operations, is thought to be the first major cyberattack in the United States in response to the Trump administration's war in Iran.
Coverage Details
Bias Distribution
- 72% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
