At a Glance
- Company: Stryker Corporation (NYSE: SYK)
- Location: Portage, Michigan (global operations)
- Headline figures: Network outage since March 11; shares -3.6%
- Focus area: Microsoft environment disruption
- Next steps: Containment, system restoration with experts
What happened?
Stryker disclosed a cyberattack on March 11, 2026, causing global network disruption to its Microsoft environment affecting internal systems, laptops and phones. Pro-Iranian group Handala claimed responsibility, citing retaliation for alleged school bombing in Iran. No ransomware detected; company activated continuity measures.
Why does it matter?
Stryker ($25B+ revenue) manufactures critical devices (Mako robots, implants, beds); outage risks hospital supply chains and surgical delays. Attack escalates Iran-linked cyber threats to US healthcare amid regional tensions, following similar infrastructure targeting.
Who’s behind it?
Stryker confirmed incident contained; working with cybersecurity experts. Handala (Iranian intelligence-linked) claimed 50TB data exfiltration. FBI monitors potential retaliation wave.
How was it achieved?
Attack remotely wiped Windows devices; employees instructed to disconnect. Mako systems confirmed unconnected and malware-free. Business continuity supports customers.
What’s next?
Timeline for full restoration unknown; ongoing investigation. No customer data breach confirmed. Stock impact limited; healthcare cyber insurance mitigates financial hit.
What are people saying?
Stryker: “Believe incident contained… business continuity in place.” Check Point: “High-value healthcare target… patient safety risk.”