Global Medical Giant Stryker Crippled by Massive Cyber Attack, Systems Offline
One of America's largest medical devices companies, Stryker, has been struck by a massive cyber attack that has sent its systems offline and disabled laptops and phones of employees worldwide. The incident, which occurred on Wednesday, March 11, left thousands of Stryker staff unable to access their devices, crippling operations across 61 countries.
Stryker's Global Operations Disrupted by Cyber Intrusion
Stryker, based in Portage, Michigan, is a major player in the healthcare industry, manufacturing a wide range of medical products including artificial joints and hospital beds. With a revenue exceeding $25 billion in 2025 and a market valuation of approximately $132 billion, the company employs around 56,000 people globally. The cyber attack has severely impacted its operations, particularly at its largest site outside the United States in Cork, Ireland.
In response to the breach, Stryker confirmed experiencing a global disruption to its Microsoft systems due to the cyberattack. The company stated, "We have no indication of ransomware or malware and believe the incident is contained." However, in a securities filing, Stryker acknowledged that it is working diligently to restore affected functions but expects the attack to disrupt company operations for an undetermined period.
Hackers Link Attack to Iranian Military Strike, Display Handala Logo
Hackers have associated the Stryker cyberattack with a reported military strike in the Iranian city of Minab, claiming it was carried out as retaliation for an attack on a girls' school that caused numerous deaths. This marks one of the first major cyber disruptions of an American organization since joint US-Israeli strikes against Iran.
On the disabled systems of Stryker employees, hackers displayed the logo of Handala, a collective identified by Western cyber threat experts as an Iran-linked group. The login screens showed a message reading, "No need to learn Hebrew anymore. You won't need it for much longer." Employees reported that their laptops stopped working, and in some cases, personal mobile phones with company work profiles were also affected.
Handala Group Claims Responsibility, Wipes Data from Devices
Reports indicate that Handala is a pro-Palestinian hacking group that has claimed responsibility for attacking Stryker due to its connections to Israel. In 2019, Stryker acquired the Israeli company OrthoSpace, and last year, it secured a $450 million contract to supply medical devices to the US Department of Defense.
The hackers deployed wiper malware that erased files and data from systems linked to Stryker's Microsoft Windows environment. According to Handala's statement posted online, they have wiped over 200,000 systems, servers, and mobile devices and extracted 50TB of data. The group claims that Stryker offices in more than 50 countries have been forced to shut down as a result.
Impact on Employees and Company Response
Employees across the United States, Europe, and Asia were locked out of their systems, unable to access email, internal software, or communication tools. Stryker has instructed its approximately 56,000 global employees to disconnect from all networks and avoid turning on company-issued devices. A memo seen by Bloomberg News revealed that the attack has crippled the company's network.
Wiper attacks typically spread through phishing emails, malicious downloads, or compromised websites, exploiting software vulnerabilities to install malware. Once inside a network, the malware deletes or corrupts data, aiming to destroy as much information as possible and halt normal operations, leading to financial loss and reputational damage.
White House Comments on the Cyber Threat
A White House official commented on the situation, stating, "The Trump administration is always proactively monitoring potential cyber threats and driving a response with our world-class critical infrastructure regulator agencies and law enforcement entities." This underscores the ongoing concerns about cybersecurity in critical sectors like healthcare.
The Stryker cyber attack highlights the growing threat of state-affiliated hacking groups targeting major corporations, with significant implications for global business operations and national security.
