Iran-Linked Group Hacks U.S. Medical Firm

An Iran-linked hacker group, Handala, claimed responsibility on Wednesday, March 12, 2026, for a cyberattack on U.S. medical device manufacturer Stryker Corporation, causing global disruption to its systems. The group stated the attack was retaliation for a bombing at the Minab school in Iran, escalating Middle East tensions into the cyber domain.

The cyberattack impacted thousands of Stryker employees utilizing Microsoft systems. Stryker, based in Michigan, acknowledged ongoing disruptions and limitations to its information systems and business applications, with the timeline for full restoration currently unknown. The company's share price dropped approximately 3% following news of the incident.

Handala, identified as an Iranian hacktivist persona active since 2023, claimed to have wiped systems and extracted 50 terabytes of data, though Stryker reported no indication of ransomware or malware and believes the incident is contained. Stryker's investigation is ongoing to determine the full scope, nature, and potential material financial and operational impacts.