Iranian Cyberattack Disrupts Stryker's Global Operations
Article Content
- •Stryker's operations were severely disrupted by a wiper attack from the Handala group.
- •The attack affected over 200,000 systems and 56,000 employees globally.
- •Stryker's stock dropped 9%, resulting in a market loss of nearly $6 billion.
Stryker, a U.S.-based medical technology company, suffered a significant cyberattack attributed to the Iranian-linked hacking group Handala. The attack, which began shortly after midnight on March 12, 2026, involved a destructive wiper attack that wiped over 200,000 systems running Microsoft Windows across Stryker's global network. This incident disrupted order processing, manufacturing, and shipping operations, affecting approximately 56,000 employees in 79 countries. Stryker's stock fell about 9% to $339, with a total market loss of nearly $6 billion since the attack. The company reported no indication of ransomware or malware, but the timeline for full restoration remains unknown. Social sentiment regarding Stryker has turned negative, with scores between 18 and 25 out of 100 in the past 30 hours. Analysts are monitoring the situation closely, as the attack threatens Stryker's 2026 growth guidance of 8% to 9.5%. If operations normalize quickly, the company may still meet its growth targets.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track handala and Stryker in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…