Stryker Systems Still Disrupted Five Days After Iran-Linked Cyberattack
The Iran-linked group Handala claimed the attack as retaliation, wiping thousands of devices and disrupting Stryker’s order and shipment systems, the company said.
- On March 11, 2026, Stryker, America's largest medical device maker, announced a cyberattack disrupted its global Microsoft environment and said five days later services remain disrupted.
- According to Reuters and Check Point Research, Handala, an Iran-linked hacker group, claimed responsibility, while Stryker said the incident was contained to its internal Microsoft corporate environment with no ransomware or malware detected.
- Halcyon researchers found Intune base64 payloads with remote-wipe commands that deleted data, and the attacker claims to have exfiltrated 50 terabytes.
- Electronic ordering and shipping systems are offline, so Stryker Sales Representatives and distributors manually replenish products while global manufacturing sites operate under resiliency plans.
- Under investigation, Stryker is working with third-party forensic experts and the Cybersecurity and Infrastructure Security Agency; the company believes the attack was contained but lacks a full scope and restoration timeline.
32 Articles
32 Articles
Stryker says it's restoring systems after pro-Iran hackers wiped thousands of employee devices
The hack, which brought ongoing widespread disruption to the company's operations, is thought to be the first major cyberattack in the United States in response to the Trump administration's war in Iran.
A major attack hit the Stryker company, with ramifications to Sweden.
Cyber Attack Plagues Michigan-Based Medical Company
PODCAST: March 17, 2026 ~ Chris Renwick, Lloyd Jackson, and Jamie Edmonds spoke with Brent Yax, CEO of Awecomm, about cyberattacks. They discuss Iranian hacking groups and the impact on US companies.KALAMAZOO ~ Michigan-based medical device maker Stryker has been battling a cyber attack for a week, with its online ordering system still down. The attack has been contained, according to the business, after thousands of business devices gl…
Stryker says cyberattack on its network contained
March 17 : Medical device maker Stryker said on Tuesday it has contained a cyberattack that caused widespread disruption to its business and was now prioritizing restoring systems that directly support customers, ordering and shipping. A cyberattack on March 11 had affected Stryker's operations, hindering or
Stryker Hit With Suit Over Cyberattack Reportedly Tied To Iran - Law360 Employment Authority
A former customer service representative for Stryker has filed a proposed class action against the medical technology company after it was the target of a cyberattack reportedly linked to an Iranian hacker group, claiming that the company's security failures led to the health information of potentially millions of individuals being compromised.
Coverage Details
Bias Distribution
- 68% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium















