Cyberattack Shuts Down Stryker’s Global IT Systems; Iran‑Linked Hackers Suspected After Devices Erased

Stryker’s global IT infrastructure was crippled by a suspected Iran‑linked cyberattack that wiped employee Windows devices and disrupted operations worldwide.

A major cyberattack believed to be connected to Iranian‑linked hackers brought the global information technology systems of medical technology manufacturer Stryker to a halt on March 11, disrupting operations across continents and forcing widespread shutdowns of corporate computing devices,reports customreceipt.com, with reference to wsj. Staff and contractors attempting to log in to internal networks encountered the emblem of a hacking collective on the sign‑in screens, and employees reported that remote devices running Microsoft’s Windows operating system — including laptops, smartphones, and other network‑linked gear — had been wiped clean.

The incident began just after midnight Eastern Time, according to people familiar with the situation, and quickly affected devices used by Stryker personnel around the world, leaving many unable to access corporate systems or internal applications. Representatives for the Michigan‑based company have acknowledged a severe global disruption to its technology environment while clarifying that, at present, there is no confirmed evidence of traditional ransomware or malware extortion being used in the breach.

Employees were instructed to power down company‑issued equipment, disconnect from all networks, and remove corporate mobile management profiles from personal phones that had been configured for work access. The measures are aimed at containing the incident, which has led to significant operational challenges as IT teams, security specialists, and partners including Microsoft work to assess the full impact and restore normal services.

Screenshots and reports circulated online showed login interfaces defaced with the logo of “Handala,” a group described by multiple cybersecurity analysts as a pro‑Palestinian collective with alleged ties to Iranian interests. The appearance of this symbol on Stryker login pages has driven speculation that the attack may be part of a broader geopolitical cyber campaign, although formal attribution remains under investigation by company and external cyber threat experts.

Stryker, which produces surgical and neurotechnology equipment, orthopedic implants, and other medical devices used in hospitals worldwide, employs tens of thousands of people and reported revenue in excess of $25 billion in 2025. The company’s share price fell sharply in trading following the disclosure of the alleged cyberattack, reflecting investor concern over the technological disruption and the potential operational fallout.

Earlier we wrote about Apple’s 50th Anniversary 2026: How the iPhone, iPod and Mac Shaped Global Tech