Iran-Linked Hackers Attack US Medical Tech Leader Stryker
A cyberattack has significantly disrupted the operations of Stryker, a prominent U.S. medical equipment provider. The incursion is believed to be linked to Iranian hackers, impacting Stryker’s internal networks globally.
Cyberattack Details
The attack occurred on a Wednesday and primarily affected Stryker’s Microsoft environment. Reports indicate that critical data was compromised and that numerous devices became non-functional, halting communication across the company’s internal channels.
Company Response
In an official filing with the SEC, Stryker admitted that they are still assessing the full damage. The company stated that the operational and financial consequences are currently unknown. As of early Thursday morning, the issue continued to unfold, with Stryker working diligently to restore services.
“We are continuing to resolve the disruption impacting our global network,” Stryker declared, assuring that their major products, including Mako and LIFEPAK35, remain safe for use. The initial investigation indicated no traces of malware or ransomware, suggesting that the breach was confined to their internal systems.
Allegations of Data Breaches
The Iranian hacking group Handala has claimed responsibility for the attack via a post on X. They allege to have extracted 50 terabytes of sensitive data and disrupted over 200,000 devices, including systems and mobile units. Allegations regarding Handala’s involvement were corroborated by various users on Reddit and reports from The Wall Street Journal, indicating that the group’s logo appeared on internal login pages.
Impact on Operations
This incident may represent the first noteworthy cyberattack amidst the ongoing tension between the U.S. and Iran. The repercussions are believed to extend to Stryker’s facilities in Europe, Asia, and North America. Feedback from an employee at the company’s Cork, Ireland location, its largest facility outside the U.S., highlighted the chaos caused by the attack. The employee noted, “Nobody can work,” reflecting on the complete operational halt and uncertainty within the company.
- Target: Stryker Corporation
- Attack method: Cyberattack linked to Iranian hackers
- Data compromised: 50 terabytes
- Devices affected: Over 200,000
- Global impact: Operations in Europe, Asia, US
- User reports: Confirmed involvement of Handala
The attack on Stryker underscores the growing threat posed by state-sponsored hacking groups. As companies continue to evaluate and fortify their cybersecurity measures, this incident serves as a stark reminder of the vulnerabilities that exist in global networks.