Stryker Hit by Suspected Iranian-Linked Cyberattack, Disrupting Global Operations

A major cyberattack, allegedly linked to the Iranian-backed hacking group Handala, has significantly disrupted operations at Stryker, a leading medical technology company. The attack, which began on March 11, 2026, has impacted thousands of employees globally, with systems at the company’s Cork, Ireland headquarters particularly affected.

What Happened?

The cyberattack is characterized as a “wiper” attack, a destructive form of malware designed to permanently erase system data rather than demand a ransom Times Now. Employees reported losing access to corporate networks, internal software, and company communications. Devices displayed the logo of the Handala hacking group, which cybersecurity analysts have previously connected to Iran-aligned cyber operations National Cyber Security Review, Newsweek.

The disruption extends beyond Ireland, impacting employees in multiple countries across Stryker’s global network. More than 5,500 Stryker employees in Ireland have been affected Economic Times.

Investigation and Response

Ireland’s National Cyber Security Centre is investigating the breach, working alongside Stryker’s internal security teams and external experts, including Microsoft engineers National Cyber Security Review. Stryker has stated that it is experiencing a “severe, global disruption impacting all Stryker laptops and systems that connect to our network” and is working to restore systems and maintain operations National Cyber Security Review, Newsweek.

Employees have been advised not to connect to the Stryker network through any device, including mobile apps, until further notice Newsweek.

The Handala Group and Potential Motives

The Handala hacking group is believed to have links to the Iranian regime and has been associated with cyber operations during periods of heightened geopolitical tensions Times Now. The group uses a cartoon image of a Palestinian boy, a symbol of Palestinian resistance Times Now.

While the specific motive for targeting Stryker remains unclear, some reports suggest a possible connection to the company’s business links with Israel Newsweek. The attack comes shortly after recent strikes between the U.S. And Israel and Iran Newsweek.

Impact and Future Concerns

The shutdown is expected to have a significant financial impact on Stryker, halting the manufacturing of medical products and devices Times Now. A cybersecurity firm CEO based in Cork warned that other global companies could be targeted in the coming days and weeks, emphasizing the sophistication and resources of the Handala group Times Now.

Unlike many cyberattacks motivated by financial gain, the Handala group’s primary objective appears to be causing chaos Times Now.