Back Bloomberg

US Tells Companies to Secure Microsoft System After Stryker Hack

Bloomberg • March 19, 2026

The US government is warning businesses to secure their corporate accounts within a popular Microsoft Corp. management tool, following a cyberattack on Stryker Corp. last week.

The Cybersecurity and Infrastructure Security Agency issued an advisory late Wednesday urging companies to follow Microsoft’s recommendations for fortifying Intune, a tool that manages employee and administrative account access across an organization.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Urges Endpoint Security Enhancements After Stryker Cyberattack On March 11, 2026, medical technology firm Stryker experienced a significant cyberattack attributed to the Iran-linked hacking group Handala. The attack exploited vulnerabilities in Stryker's Microsoft Intune endpoint management system, allowing the attackers to wipe data from approximately 200,000 devices and steal 50 terabytes of data. The incident caused global disruptions to Stryker's operations, affecting order processing, manufacturing, and shipping. CISA has since issued an urgent advisory urging U.S. organizations to harden their endpoint management systems, particularly Microsoft Intune, by implementing best practices such as role-based access control and multi-factor authentication. Stryker has confirmed the containment of the breach but has not disclosed specific details on how the attackers gained access. The FBI is coordinating with CISA to monitor further threats related to this incident. The attack is seen as part of a broader geopolitical conflict, with implications for cybersecurity across the healthcare sector. 45 sources 79

Extracted Entities

Companies (1)

Stryker Corp