Suspected wiper malware breach shuts down Stryker corporate networks

March 12, 2026 A cyber attack has disrupted global operations at medical technology company Stryker after hackers reportedly wiped corporate systems and disabled thousands of devices across the company’s network. The breach left employees unable to access laptops, email and internal software as cybersecurity teams worked to contain the incident.

The attack affected Stryker facilities across Europe, Asia and the United States. Employees at the company’s Cork, Ireland site — its largest base outside the U.S. — reported that corporate login systems suddenly stopped functioning, with devices locked or wiped and internal communication systems inaccessible.

Stryker, headquartered in Kalamazoo, Michigan, produces surgical equipment, orthopedic implants and hospital technology used by healthcare systems worldwide. The company employs about 56,000 people across more than 60 countries and reported roughly $25 billion in annual sales.

Cybersecurity analysts believe the attack may be linked to the hacktivist group Handala, a pro-Palestinian collective associated with Iranian cyber networks. The group has previously conducted cyber operations targeting Western companies and Israeli-linked organizations.

Handala claimed responsibility for the attack in a message posted online, stating that systems across dozens of Stryker offices were shut down after data was erased from corporate servers and devices. Researchers have previously linked the group to Iran’s Ministry of Intelligence and Security through a broader cyber actor known as Void Manticore.

Investigators suspect the attackers used destructive “wiper” malware rather than ransomware. Unlike ransomware attacks that encrypt data and demand payment, wiper malware is designed to permanently erase system files and disable devices, causing operational disruption rather than financial extortion.

Reports from affected staff indicate corporate laptops stopped functioning and mobile devices linked to company accounts were wiped. Some workers said they were communicating through external messaging apps while internal systems remained offline.

The attack has drawn attention because of Stryker’s role in the healthcare supply chain. Hospitals rely on the company’s products for surgical procedures and emergency care systems.

Healthcare organizations are now monitoring the situation for potential disruptions. The American Hospital Association said it was aware of the attack and was assessing whether it could affect hospital operations or supply chains.

Cybersecurity analysts say the incident reflects a growing trend of geopolitical cyber campaigns targeting private companies that operate critical infrastructure. As global organizations rely increasingly on connected digital systems, attacks against corporate networks can ripple across industries such as healthcare, manufacturing and logistics.

Investigations into the breach are continuing as Stryker works to restore affected systems.

Top Stories

Related Articles

March 12, 2026 Kyndryl has launched its Cloud Uplift platform in Microsoft’s Canadian data centre regions, allowing organizations to migrate more...

March 12, 2026 Nvidia demonstrated a hands-free driver-assist system developed with Mercedes during a recent test drive through San Francisco. more...

March 12, 2026 Microsoft has asked a U.S. federal court to temporarily block the Pentagon from enforcing a decision that more...

March 11, 2026 Nvidia is planning to launch an open-source platform designed to help companies deploy artificial intelligence agents to more...

Jim Love

Jim is an author and podcast host with over 40 years in technology.

Share:
Facebook
Twitter
LinkedIn