Stryker Hit by Cyberattack Linked to Iran, Disrupting Global Networks

A major cyberattack, claimed by a pro-Iran hacking group, has caused a “global network disruption” to Stryker, a leading U.S.-based medical device and services provider. The attack, which began on Wednesday, March 11, 2026, has impacted the company’s Microsoft environment and prompted a swift response to contain the incident.

What Happened?

Stryker, headquartered in Michigan, confirmed the cyberattack in a statement to CNN, stating, “We are experiencing a global network disruption to our Microsoft environment as a result of a cyberattack.” The company added that it has “no indication of ransomware or malware” and believes the incident is contained. Teams are working to assess the full impact on systems, and business continuity measures are in place to support customers and partners.

Who is Behind the Attack?

The hacking group, identified as Handala, has taken responsibility for the attack. According to SecurityWeek, Handala has been closely monitored by cybersecurity firms due to its activity surrounding the ongoing US-Israel-Iran conflict. The group claims to have wiped more than 200,000 servers, mobile devices, and other systems, and alleges the theft of 50TB of data. The Wall Street Journal reported that the Handala logo appeared on company login pages.

Impact on Stryker’s Operations

The cyberattack has reportedly affected Stryker’s operations in multiple countries, including Ireland. Local media reports indicate that the company’s computers in Ireland were also impacted. Stryker serves over 150 million patients globally through its health equipment and services, which range from defibrillators to ambulance cots. While the immediate impact on the provision of medical equipment to U.S. Hospitals remains unclear, cybersecurity executives across the health sector are on alert for potential disruptions. The attack reportedly wiped phones, laptops, and other devices connected to Stryker’s network, particularly Windows systems, prompting the company to advise workers to disconnect from all networks and refrain from turning on company devices.

Broader Context and Retaliation

This cyberattack appears to be one of the first notable pro-Iranian hacks against U.S. Infrastructure since the U.S. And Israel began bombing Iran last month. U.S. Intelligence officials have warned of potential retaliatory cyberattacks from Tehran-linked hackers. Handala stated the attack on Stryker was in retaliation for a missile strike on an elementary school in Iran, which Iranian state media claims resulted in the deaths of at least 168 children.

Stryker’s Financial Profile

Stryker is a Fortune 500 company that reported over $25 billion in revenue for 2025, employing approximately 56,000 people worldwide. Its critical role in the healthcare supply chain makes it an essential partner for hospitals globally.

Key Takeaways

• A cyberattack linked to an Iranian-backed hacking group has disrupted Stryker’s global networks.
• The hacking group, Handala, claims responsibility and alleges significant data theft and system disruption.
• Stryker believes the incident is contained and is working to restore operations.
• The attack is part of a broader pattern of potential retaliation for U.S. And Israeli actions in Iran.

Sources:

Reuters, CNN, SecurityWeek, AP News