A pro-Iran hacking group has claimed responsibility for a major cyberattack against Stryker, a Michigan-based medical device company, in what appears to be the first significant Iranian-linked hack against a U.S. company since the United States and Israel began bombing Iran last month.
Thousands of Stryker employees woke up on Wednesday (March 11) to find their cellphones and laptops suddenly disabled. According to CNN, the hacking group known as Handala Team claimed responsibility for the attack via posts on Telegram and X, saying it was retaliation for a missile strike on an Iranian elementary school that Iranian state media claims killed at least 168 children. The Pentagon is investigating that incident.
In a statement on its website, Stryker said the disruption was caused by a cyberattack targeting its Microsoft environment. "We have no indication of ransomware or malware and believe the incident is contained," the company said. "Our teams are working rapidly to understand the impact of the attack on our systems."
Rafe Pilling, director of threat intelligence at cybersecurity firm Sophos — which has tied Handala to Iran's Intelligence Ministry — told NBC News that the hackers appear to have gained access to Stryker's Microsoft Intune account, a platform used to manage corporate devices. "They seem to have obtained access to the Microsoft Intune management console," Pilling said. "One of the features is the ability to remotely wipe a device if it's lost or stolen. Looks like they triggered that for some or all of the enrolled devices."
Microsoft's website describes the remote wipe feature as "commonly used when a device needs to be retired, repurposed, reset for troubleshooting, or securely erased if lost or stolen." Microsoft did not respond to a request for comment.
The attack also disrupted a Stryker system called Lifenet, which emergency responders use to send patient data to hospitals. Maryland's Institute for Emergency Medical Services (EMS) Systems notified hospitals statewide on Wednesday (March 11) that Stryker's Lifenet electrocardiogram transmission system was "non-functional in most parts of the state." Todd Abramowitz, a spokesperson for the agency, told CNN that "no effect on patient care" had been reported and that paramedics were conveying patient information verbally, as they routinely do.
ABOUT STRYKER
Stryker is a major global medical‑technology company that designs and manufactures medical devices, surgical equipment, and healthcare solutions used in hospitals and clinics worldwide. They focus heavily on orthopedics, surgery, neurotechnology, and patient‑handling systems, impacting more than 150 million patients each year.
Cybersecurity experts said the attack was a sign that Iran's hacking capabilities remain intact despite ongoing military pressure. "Cyber operations don't require much infrastructure," said Alex Rose, global head of government partnerships at Sophos. "A laptop and an internet connection can be enough to reach out and wreak havoc."
U.S. intelligence officials had previously warned of the possibility of Tehran-linked hackers retaliating for the bombing campaign. Federal agencies, including the Department of Health and Human Services, are working to assess any potential impact on patient care. Hospitals are also weighing whether to disconnect Stryker equipment from their networks while the investigation continues.
No timeline has been announced for full restoration of Stryker's systems.
Scale & Impact
- One of the world’s leading medical technology companies
- 150+ million patients impacted annually
- Operations in 75+ countries
- 53,000 employees globally
No public source provides an exact count of how many Central Pennsylvania hospitals use Stryker equipment. Hospitals are not required to publish vendor lists, and Stryker does not disclose customer‑specific data. However, we can infer usage patterns based on the major health systems in the region and Stryker’s strong presence in hospital emergency, surgical, and orthopedic departments.
What This Means for Stryker Usage
Stryker is a top‑tier national supplier of:
- Orthopedic implants
- Surgical equipment
- Neurotechnology devices
- Emergency/EMS equipment
Because these product categories are standard in nearly all acute‑care hospitals, it is highly likely that many—possibly most—Central PA hospitals use at least some Stryker equipment. But no public dataset confirms the exact number.