Stryker Cyberattack: Iran-Linked Hackers Disrupt Medical Device Giant

A major cyberattack has crippled the global networks of Stryker, one of the world’s largest medical device companies, with an Iran-linked hacking group claiming responsibility. The attack, carried out by a group known as Handala, is being described as a retaliatory strike following a deadly incident in Iran and signals a potential escalation in cyber warfare.

Retaliation for School Strike in Minab

Handala stated the attack was in response to the killing of more than 170 people, primarily schoolgirls, in a strike on a school in the southern Iranian city of Minab on March 3, 2026. Al Jazeera reports that this strike occurred on the first day of the US-Israeli military war against Iran. An investigation by Al Jazeera’s Digital Investigations Unit suggests the school was possibly deliberately targeted.

Data Breach and System Disruptions

The hacking group claims to have seized 50 terabytes of company data, stating it is “now in the hands of the free people of the world.” MSN reports that outages began shortly after midnight on the US East Coast, impacting Windows-based devices, including laptops and mobile phones, connected to Stryker’s systems.

Stryker confirmed experiencing a global network disruption to its Microsoft environment as a result of the cyberattack. The company stated it had found no evidence of ransomware or malware and believed the incident was contained. Staff reported Handala’s logo appearing on company login pages. Calls to Stryker’s headquarters in Portage, Michigan, were met with a recorded message indicating a “building emergency.”

Broader Geopolitical Context

This incident occurs amid heightened tensions in the region, with Iran escalating threats against Western economic targets. The Islamic Revolutionary Guard Corps (IRGC) has declared US and Israeli-linked “economic centres and banks” as legitimate targets, and state-affiliated media has identified US tech firms, including Google, Microsoft, and Nvidia, as potential targets. Ozarab Media highlights the attack as signaling a fresh era in cyber warfare.

An Iranian security source told Al Jazeera the conflict is entering “a new phase,” hinting at potential restrictions on a key regional waterway, similar to threats made regarding the Strait of Hormuz.

Stryker’s Global Reach

Stryker, headquartered in Portage, Michigan, reported revenues exceeding $25 billion in 2025 and provides medical products to over 150 million patients across 61 countries. The company manufactures a wide range of medical devices, including artificial joints, surgical instruments, hospital beds, and robotic surgery systems.

Concurrent Attack on Verifone

Handala similarly claimed responsibility for a concurrent attack on payment processing company Verifone, though Verifone denied experiencing any service disruptions.

Investigation and Response

Six senior Democratic senators in the United States have called for an investigation into the strike on the school in Minab, expressing their horror at the incident. Neither the FBI nor the Department of Homeland Security’s cybersecurity agency have responded to requests for comment regarding the cyberattack on Stryker.