Trending Now - Iran-backed Hackers Launch Cyber Assault on U.S. Medtech Firm

WHO:

Stryker is based in Portage, Michigan, and has 56,000 employees worldwide.

The hacktivist group linked to the attack is identified as Handala.

Pro-Iran hacktivist group claimed responsibility for the cyberattack.

Stryker, a Michigan-based medical device maker, is the targeted organization.

Joshua Corman, a cybersecurity expert focused on the health sector, provided commentary.

WHAT:

Stryker stated that it is experiencing a "global network disruption to our Microsoft environment as a result of a cyberattack."

The cyberattack began around midnight on March 11th, 2026, as employees watched data being wiped from company computers in real-time.

Handala claimed that "over 200,000 systems, servers, and mobile devices have been wiped and 50 terabytes of critical data have been extracted."

Stryker's SEC filing disclosed that the “full scope” of the operational and financial impact on its business “are not yet known.”

An employee at Stryker's base in Cork, Ireland, reported that “nobody can work,” and that most of the company-assigned devices had been wiped.

Handala claimed the cyberattack was a "new chapter in cyber warfare."

During the attack, it was reported that in some departments, 95% of computers were wiped.

Stryker recently signed a $450 million contract for medical devices with the U.S. military.

Stryker stated, “We have no indication of ransomware or malware and believe the incident is contained. Our teams are working rapidly to understand the impact of the attack on our systems.”

The Handala group claimed that "over 200,000 systems, servers, and mobile devices have been wiped and 50 terabytes of critical data have been extracted."

Stryker's operations in 79 countries have been forced to shut down due to the attack.

Stryker's computers in Ireland sent home more than 5,000 workers on March 11th, 2026.

A voicemail at Stryker's main U.S. headquarters stated, “We are currently experiencing a building emergency. Please try your call again later.”

An employee reported that "anyone with Microsoft Outlook on their personal phones had their devices wiped."

A healthcare professional indicated that they are currently unable to order surgical supplies normally sourced through Stryker.

Handala claimed that "over 200,000 systems, servers, and mobile devices have been wiped and 50 terabytes of critical data have been extracted" during the cyberattack.

Stryker's computers in Ireland were reported to have sent home more than 5,000 workers on March 11th, 2026.

A voicemail message at Stryker's main U.S. headquarters stated, “We are currently experiencing a building emergency. Please try your call again later.”

An employee reported that "anyone with Microsoft Outlook on their personal phones had their devices wiped."

A healthcare professional indicated that they are currently unable to order surgical supplies normally sourced through Stryker.

The Pentagon is investigating the missile strike that killed at least 168 children in Iran on February 28th, 2026.

The Handala manifesto referred to Stryker as a “Zionist-rooted corporation,” possibly linked to Stryker’s 2019 acquisition of the Israeli company OrthoSpace.

Handala claimed that "over 200,000 systems, servers, and mobile devices have been wiped and 50 terabytes of critical data have been extracted" during the cyberattack.

Stryker's operations in 79 countries have been forced to shut down due to the attack.

Stryker's computers in Ireland were reported to have sent home more than 5,000 workers on March 11th, 2026.

A voicemail at Stryker's main U.S. headquarters stated, “We are currently experiencing a building emergency. Please try your call again later.”

An employee reported that "anyone with Microsoft Outlook on their personal phones had their devices wiped."

A healthcare professional indicated that they are currently unable to order surgical supplies normally sourced through Stryker.

Stryker reported revenue of more than $25 billion in 2025.

The cyberattack disrupted Stryker's global networks on March 11th, 2026.

A cyberattack caused a “global network disruption” to Stryker's Microsoft environment.

Stryker serves more than 150 million patients through its health equipment and services.

Stryker’s shares fell more than 3% following reports of the cyberattack.

The hack was claimed to be in retaliation for a U.S. missile strike that killed more than 175 people, most of them children.

WHERE:

The cyberattack affected Stryker's operations in Michigan and its computers in Ireland.

WHEN:

The U.S. and Israel began bombing Iran in February 2026.

The missile strike on the elementary school in Iran occurred in February 2026.

The hacking group made their claim on March 11th, 2026.

WHY:

Handala stated that the cyberattack was executed "in retaliation for the brutal attack on the Minab school and in response to ongoing cyber assaults against the infrastructure."

The attack was claimed to be in retaliation for the bombing of an Iranian school that left 175 people, mostly children, dead.

The Handala group claimed the attack was "in retaliation for the brutal attack on the Minab school and in response to ongoing cyber assaults against the infrastructure."

The missile strike on the Minab school in Iran occurred on February 28th, 2026, killing at least 168 children.

The hacking group claimed the attack was "in retaliation for the brutal attack on the Minab school and in response to ongoing cyber assaults against the infrastructure."

The Handala manifesto referred to Stryker as a “Zionist-rooted corporation,” possibly linked to Stryker’s 2019 acquisition of the Israeli company OrthoSpace.

The cyberattack was claimed as retaliation for a U.S. missile strike on an elementary school in Iran.

HOW:

The attack appears to have used Microsoft Intune to issue a ‘remote wipe’ command against all connected devices.

Employees reportedly watched data being wiped from company computers in real-time during the attack.

The attack appears to have used Microsoft Intune to issue a ‘remote wipe’ command against all connected devices.

The logo of Handala appeared on Stryker's company login pages during the cyberattack.

Stryker reported that there was no indication of ransomware or malware and believed the incident was contained.

(UPDATED March 12, 2026 17:17 UTC)

Stryker has reported a significant global network disruption due to a cyberattack that began around midnight on March 11, 2026, with employees witnessing data being wiped from their computers in real-time. Handala claims that over 200,000 systems and devices have been affected, with 50 terabytes of critical data extracted, while Stryker's SEC filing indicates that the full impact on operations and finances is still unknown. An employee in Cork, Ireland, noted that "nobody can work" as most company devices have been wiped, and the attack appears to have utilized Microsoft Intune to issue a remote wipe command across all connected devices.

(UPDATED March 12, 2026 07:15 UTC)

In a significant development, a group called Handala has claimed responsibility for a cyberattack that they describe as a "new chapter in cyber warfare," which resulted in 95% of computers being wiped in some departments. This attack is reportedly in retaliation for the bombing of an Iranian school that tragically left 175 people dead, mostly children, and employees witnessed the data being erased from their computers in real-time. Meanwhile, Stryker has recently signed a substantial $450 million contract with the U.S. military for medical devices.

(UPDATED March 12, 2026 03:43 UTC)

Stryker has confirmed that their operations in 79 countries have been forced to shut down following a significant cyberattack, with reports indicating that over 200,000 systems and devices have been wiped and 50 terabytes of critical data extracted. The Handala group claims this attack is in retaliation for a recent missile strike on a school in Iran that tragically killed at least 168 children, and it appears that Microsoft Intune was used to remotely wipe connected devices. In the wake of the incident, Stryker's headquarters in the U.S. is experiencing a building emergency, and employees have reported that personal devices with Microsoft Outlook have also been affected.

(UPDATED March 12, 2026 01:26 UTC)

In a significant cyberattack, the hacking group Handala has claimed responsibility for wiping over 200,000 systems, servers, and mobile devices, extracting 50 terabytes of critical data, and affecting Stryker's operations, which led to more than 5,000 workers being sent home on March 11. A voicemail from Stryker's U.S. headquarters indicated a building emergency, while reports suggest that employees with Microsoft Outlook on personal devices had their information wiped, disrupting the ordering of surgical supplies. The Pentagon is also investigating a missile strike in Iran that killed at least 168 children on February 28, with Handala stating their attack was in retaliation for violence against a school and ongoing cyber assaults on infrastructure.

(UPDATED March 11, 2026 23:04 UTC)

Today, a major cyberattack has hit Stryker, with Handala claiming that over 200,000 systems, servers, and mobile devices have been wiped, and 50 terabytes of critical data extracted. As a result, Stryker has shut down operations in 79 countries, and employees in Ireland were sent home, while a voicemail at their U.S. headquarters indicated a building emergency. The attack, which reportedly utilized Microsoft Intune to issue a remote wipe command, has left healthcare professionals unable to order surgical supplies typically sourced through Stryker.

(UPDATED March 11, 2026 21:05 UTC)

In a significant development today, Stryker, a major medical technology company based in Portage, Michigan, experienced a cyberattack that disrupted its global networks. The hacktivist group Handala claimed responsibility for the attack, which was marked by their logo appearing on Stryker's company login pages. Stryker, which employs 56,000 people worldwide and reported revenue exceeding $25 billion in 2025, is now working to address the fallout from this incident.

(UPDATED March 11, 2026 19:20 UTC)

Today, a pro-Iran hacktivist group claimed responsibility for a cyberattack that caused a global network disruption at Stryker, a Michigan-based medical device maker serving over 150 million patients. The attack, which affected Stryker's operations in Michigan and its computers in Ireland, was reportedly in retaliation for a U.S. missile strike that killed more than 175 people, mostly children, in Iran. Following the incident, Stryker's shares fell more than 3%, although the company stated there was no indication of ransomware or malware and believed the situation was contained.