Iran-Linked Cyberattack Strikes US Medtech Leader Stryker

On Wednesday, Stryker, a prominent US medical equipment provider, reported a significant disruption in its global networks due to a cyberattack. This incident is believed to have been executed by a hacking group associated with Iran. The attack affected Stryker’s internal systems, particularly its Microsoft environment, leading to the deletion of critical data.

Impact of the Cyberattack on Stryker

The cyberattack caused major communication issues within the company. Reports indicate that employees experienced a complete halt in operations, with company phones ceasing to function. In an SEC filing, Stryker acknowledged that the full scale of the operational and financial repercussions remains unknown. The company is currently unable to provide a timeline for system restoration.

Current Situation

As of 12:32 AM ET on Thursday, Stryker announced it was actively working to restore its systems. The company reassured stakeholders that its medical products, including Mako and LIFEPAK35, remain safe for use. Stryker stated, “We believe the situation is contained to our internal Microsoft environment only.”

Details from the Attack

• Hacker Group: Handala, linked to Iran, claimed responsibility for the incident.
• Data Compromised: The group alleged they extracted 50 terabytes of critical data from Stryker.
• Systems Affected: Reports suggest that over 200,000 systems, servers, and mobile devices were wiped during the attack.

Employee accounts corroborate these claims. An employee based in Cork, Ireland, Stryker’s largest facility outside of the US, shared that work has ground to a halt. They confirmed that most company devices had been wiped, stating, “Nobody can work… This is going to have a huge knock-on effect.”

Context of the Attack

This incident marks a significant escalation in cyberattacks linked to Iran, particularly following recent tensions between the two nations. Previous attacks on US agencies have been attributed to Iran-associated groups, but this is notably the first major cyber offensive since the outbreak of conflict.

The situation continues to evolve, with Stryker working diligently to mitigate the effects of this cyberattack and restore full functionality across its global operations.