By Micah Jonah, March 12, 2026
An Iranian-linked hacking group has claimed responsibility for a cyberattack targeting Stryker Corporation, a major United States medical device manufacturer, causing disruptions across parts of the company’s global network.
The Michigan based company said the incident affected access to several internal systems, limiting operations while engineers work to restore full functionality. The company stated that there was no indication of ransomware or malware involved in the breach and that the situation appears to be contained.
The hacking group known as Handala, which has previously been linked to cyber operations associated with Iran, claimed responsibility for the attack through messages posted on its Telegram channel. The group described the operation as retaliation for a strike on a girls’ school in Minab during the early stages of the conflict involving the United States and Israel.
Stryker Corporation employs more than 56,000 people, operates in over 60 countries, making it one of the largest medical technology companies in the world.
Staff members reported seeing the logo of the hacking group appear on company login pages during the disruption, though the reports could not be independently verified.
The network outages reportedly began shortly after midnight on the US East Coast, affecting remote devices connected to the company’s systems, including laptops, mobile devices and other equipment running Microsoft Windows.
Following news of the incident, shares of Stryker Corporation fell by more than three percent during Wednesday’s trading session.
Cybersecurity analysts warned that the attack could signal a broader wave of retaliatory cyber operations linked to the escalating military conflict involving Iran.
Officials in the White House said the administration is closely monitoring potential cyber threats targeting US infrastructure and private sector companies.
Security researchers say the Handala group has been involved in several disruptive cyber campaigns in recent years, including hack and leak operations and attacks designed to destroy data. Some analysts believe the group operates with ties to Iran’s intelligence services.
Authorities have not yet officially attributed the attack, and investigations by federal agencies remain ongoing.
