Global Cyberattack on Stryker: Handala Claims Responsibility

On March 11, 2026, Stryker Corporation, a leading U.S. medical technology company, experienced a significant cyberattack attributed to the pro-Iran hacker group Handala. This attack resulted in a global disruption of Stryker's IT systems, affecting operations across its facilities in over 61 countries, including a substantial impact on its largest site in Cork, Ireland, where approximately 4,000 employees were unable to work. The hackers claimed to have wiped over 200,000 systems and extracted 50 terabytes of data, framing the attack as retaliation for recent military actions against Iran, specifically referencing a missile strike on a school in Minab that reportedly killed many children.

TechCrunchWho Is Behind the Cyber Attack on Stryker Cork? Iran-Linked Handala Group SuspectedIrish Daily Mirror

The cyberattack led to widespread outages, with employees reporting that their work devices, including laptops and personal phones linked to Stryker's network, were wiped clean. Internal communications described a "severe, global disruption" affecting all systems connected to the company’s network. Stryker's operations in Europe, Asia, and the U.S. were significantly impacted, with employees instructed to disconnect devices and halt work until the situation could be assessed. The disruption raised concerns about the potential impact on the supply of critical medical devices used in healthcare settings worldwide.

Stryker cyber attack leaves 4,000 Irish workers stranded

Handala, the group claiming responsibility for the attack, is known for its pro-Palestinian stance and is believed to have ties to Iranian interests. The group has previously targeted organizations linked to Western governments and Israeli entities, particularly during periods of heightened geopolitical tensions. Analysts suggest that the choice of Stryker as a target may be linked to its operations in Israel and its significant role in the global healthcare supply chain.

Major Cyber Attack Hits Global Medical Giant Stryker

Stryker has publicly stated that there is no indication of ransomware or malware and that the incident is contained. The company emphasized its commitment to restoring operations and maintaining transparency with stakeholders. Stryker's spokesperson noted, “Our teams are actively working to restore systems and operations as quickly as possible.” Meanwhile, cybersecurity experts have warned that such attacks highlight the vulnerabilities of multinational corporations in the healthcare sector, which are increasingly targeted due to their critical infrastructure.

Major Cyber Attack Hits Global Medical Giant StrykerStryker cyber attack: Which Iranian hacker group is suspected behind the breach and why did Iran choose a global medical device giant for a wiper malware attack amid the US-Iran war?

Critics of the attack have pointed out the dangers of politically motivated cyber operations, particularly those targeting essential services like healthcare. Experts have raised alarms about the potential for similar attacks to escalate, especially as geopolitical tensions continue to rise. The incident has prompted discussions about the need for enhanced cybersecurity measures across industries that manage sensitive data and critical infrastructure.

Stryker cyber attack: Which Iranian hacker group is suspected behind the breach and why did Iran choose a global medical device giant for a wiper malware attack amid the US-Iran war?

While Handala has claimed responsibility for the attack, Stryker has not officially confirmed the attribution to any specific group. Investigations are ongoing, with cybersecurity teams working to determine the full scope of the breach and how the attackers gained access to the systems. The National Cyber Security Centre in Ireland is also involved in the response to the incident.

Who Is Behind the Cyber Attack on Stryker Cork? Iran-Linked Handala Group Suspected

As Stryker works to restore its systems, the incident serves as a stark reminder of the growing threat posed by state-linked cyber operations. The company is expected to provide updates on system recovery and any potential data loss in the coming days. The attack underscores the necessity for robust cybersecurity strategies, particularly for organizations operating in politically sensitive environments.

Major Cyber Attack Hits Global Medical Giant Stryker