Cyberattack on Stryker Disrupts Medical Operations and Delays Surgeries

On March 11, 2026, medical device manufacturer Stryker Corporation experienced a significant cyberattack that disrupted its operations, including order processing, manufacturing, and shipping. The attack was attributed to Handala, an Iranian-linked hacking group, which claimed it was a retaliatory action for a strike on a girls' school in Minab, southern Iran. Following the incident, Stryker reported that its systems were compromised, affecting its ability to deliver customized medical inventory necessary for specific surgical procedures.

ReutersMedical Device Company Hit by Cyber Attack, Patient Surgeries PostponedReutersUS agency asks companies to secure Microsoft tool after Stryker cyberattack By Reuters

The cyberattack has led to the postponement of surgeries for some patients, as Stryker's disruption prevented the timely delivery of patient-specific medical equipment. A spokesperson for Stryker confirmed that "some patient-specific cases have been rescheduled" due to these inventory delivery issues. While Stryker stated that no patient-related services or connected medical products were directly affected, the operational delays have raised concerns about the broader implications for patient care.

Medical Device Company Hit by Cyber Attack, Patient Surgeries PostponedReutersReutersUS agency asks companies to secure Microsoft tool after Stryker cyberattack By Reuters

Stryker announced on March 17 that it had contained the cyberattack and was prioritizing the restoration of systems that support customer operations. The company is coordinating with external cybersecurity experts and relevant authorities to investigate the incident further. Despite the disruption, Stryker has not disclosed specific details regarding the financial impact of the attack.

Reuters

In the wake of the cyberattack, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning to organizations to enhance the security of Microsoft’s endpoint management tools. CISA noted that the Stryker incident highlighted vulnerabilities in endpoint management systems and urged companies to implement best practices to secure Microsoft Intune, which manages user access and devices across organizations. CISA is also collaborating with the Federal Bureau of Investigation to identify additional threats and determine mitigation strategies.

US agency asks companies to secure Microsoft tool after Stryker cyberattack By ReutersReutersMedical Device Company Hit by Cyber Attack, Patient Surgeries PostponedReuters

While Stryker has maintained that no patient-related services were affected, critics have expressed concerns about the potential risks associated with cyber vulnerabilities in the healthcare sector. The incident underscores the growing threat of cyberattacks on critical infrastructure and the need for robust cybersecurity measures in medical device manufacturing.

US agency asks companies to secure Microsoft tool after Stryker cyberattack By Reuters

• “as a result, some patient-specific cases have been rescheduled” — Stryker Spokesperson

Medical Device Company Hit by Cyber Attack, Patient Surgeries Postponed

This incident serves as a reminder of the increasing frequency of cyberattacks targeting healthcare providers and the importance of maintaining stringent cybersecurity protocols to protect patient care and operational integrity.

US agency asks companies to secure Microsoft tool after Stryker cyberattack By Reuters