Stryker Investigates Global Network Disruption After Suspected Iran-Linked Cyberattack

Portage, Michigan, United States- A major cyberattack disrupted systems at U.S. medical technology company Stryker early Wednesday, triggering a global outage affecting employee devices and internal networks, according to company statements and multiple media reports. The incident began shortly after midnight Eastern Time and prompted an immediate security investigation involving internal teams and external partners.

Stryker confirmed it was experiencing a “global network disruption” affecting its Microsoft-based environment after the cyberattack. In a statement reported by several outlets, the company said it had “no indication of ransomware or malware” and believes the incident is contained while teams work to determine the full impact.

Employees and contractors reported that laptops, smartphones and other devices connected to the company’s network were unable to access systems during the outage. Some remote devices running Microsoft Windows were reportedly wiped, according to people familiar with the matter cited in media reports.

Login pages on affected systems displayed the emblem of Handala, a pro-Palestinian hacking group that several threat intelligence firms have linked to Iran, according to reporting by The Wall Street Journal. The group has previously claimed cyberattacks targeting organizations in Israel and the Gulf region.

Internal communications reviewed by media outlets instructed employees not to power on company-issued devices, disconnect hardware from networks and remove work profiles from mobile phones while security teams worked to assess the breach.

The disruption affected systems across Stryker’s global operations. The Michigan-based company employs about 56,000 people and produces medical technologies used in hospitals and surgical settings worldwide, including orthopedic implants, surgical instruments and hospital equipment.

Financial markets reacted quickly to the reports, with Stryker shares falling about 3% during trading on Wednesday after news of the suspected cyberattack emerged.

Stryker said it had activated business-continuity procedures to maintain support for hospitals, healthcare providers and other partners while systems are restored. The company added that it is working with technology providers, including Microsoft, to understand the scope of the incident and secure its networks.

Authorities and cybersecurity experts have not publicly confirmed the exact origin of the attack, and investigations into the breach remain ongoing.

ALSO READ: Phoenix Suns Forward Dillon Brooks Arrested in Arizona on Suspicion of DUI