Stryker Systems Disrupted in Cyber Attack; Handala Group Claims Responsibility

On March 11, 2026, Stryker Corporation disclosed a cyber attack that disrupted its global internal networks and Microsoft systems, leaving thousands of employees locked out and devices wiped or inoperable. The Iran-linked threat group Handala claimed responsibility, alleging a destructive wiper-style operation with data exfiltration tied to geopolitical events. Open-source reporting suggests Microsoft Intune may have been abused to issue remote wipe commands. Stryker filed with the SEC stating no ransomware or malware was detected and the incident is considered contained, though investigation continues. Security recommendations include enforcing multi-admin approval for high-impact Intune operations and monitoring Stryker's official updates.