Iran-linked cyber crew claims hit on US med-tech firm • The Register

Iran-linked cyber crew claims hit on US med-tech firm • The Register

Iran-linked cyber crew claims hit on US med-tech firm • The Register

https://www.theregister.com/2026/03/11/us_medtech_firm_stryker_cyberattack_iran/

Publish Date: 2026-03-11 16:40:00

Source Domain: www.theregister.com

A hacking crew with ties to Iran’s intelligence agency claimed to be behind a global network outage at med-tech firm Stryker on Wednesday, and said the cyberattack was in response to the US-Israel airstrikes.

If true, the incident would mark a major escalation in the war’s cyber component, and could be the first destructive cyberattack linked directly to the current war to hit a major US company.

In a Wednesday statement, Stryker said it was “experiencing a global network disruption to our Microsoft environment as a result of a cyber attack,” adding that there is no indication of a ransomware infection or any other type of malware deployment. 

Initial reports from Irish news outlets indicated that Stryker employees’ devices, including their personal phones, were wiped in the attack.

The medical equipment maker said that it believes the security incident has been contained, and continues investigating the impact on its systems. 

“We are working shoulder-to-shoulder with our public- and private‑sector partners as we continue to uncover relevant information and provide technical assistance for the targeted attack on Stryker, while steadfastly standing at the ready to defend our nation’s critical infrastructure,” CISA Acting Director Nick Andersen told The Register. “As with all cyber incidents, we have launched an investigation into this matter.”

Stryker did not immediately respond to The Register’s questions about the cyberattack, including whether Handala, an Iranian hacktivist group believed to be a front for the Ministry of Intelligence and Security (MOIS), was responsible for the incident.

“If accurate, Handala’s alleged disruptive attack on Stryker marks a significant escalation – this is the first time this Iranian-backed threat actor has disruptively targeted a major US enterprise,” Check Point Research…

Source