Stryker Confirms Cyberattack Disrupted Global Network; Employees Report Wiped Devices

Summary

Stryker confirmed a cyberattack disrupted its global Microsoft environment, with business continuity measures in place. Employees reported wiped devices; Handala claimed responsibility and alleged data theft, but Stryker has not confirmed the group's role.

Key points

Stryker confirmed a cyberattack caused a global disruption to its Microsoft environment.
The company said it had no indication of ransomware or malware, believed the incident was contained, and was investigating; business continuity measures were in place.
Employees reported that corporate computers, phones, and servers were wiped and that email and other work applications were inaccessible.
Some employees said login pages displayed the Handala logo; the group claimed responsibility, alleging it wiped more than 200,000 systems and stole 50 terabytes of data.
Stryker has not confirmed Handala's role or the group's claims of system wipes and data theft.

Article Details

Victim Organization: Stryker
Incident Type: Cyberattack causing a global network disruption; employees reported wiped corporate devices and servers, while Handala claimed it carried out system wipes and stole data. Stryker said it had no indication of ransomware or malware.
Affected Data Size: Handala claimed it stole 50 terabytes of company data; this claim was not confirmed by Stryker.
Operational Impact: Stryker reported disruption to its global Microsoft environment. Employees reported that corporate computers and phones were wiped, servers and work apps were inaccessible, and some employees could not access corporate email. Some employees said operations were brought to a standstill; Stryker said business continuity measures were in place.
Ransom Or Extortion: Stryker said it had no indication of ransomware. No ransom demand or extortion activity was reported; Handala claimed data theft, which was not confirmed by Stryker.
Claim Status: confirmed

Threat Actors

HandalaA group using this name purportedly claimed responsibility for the Stryker attack and alleged that it wiped more than 200,000 systems and stole 50 terabytes of data. Stryker had not publicly confirmed Handala's role or the group's data-theft claims. The article says cybersecurity experts previously tied Handala to other Iran-based threat actors.

Vendors

MicrosoftStryker confirmed a cyberattack has disrupted its global Microsoft network and says business continuity measures are in place while teams investigate.

Countries

Iranmissile strike on a girl’s school in Iran and the ongoing military conflict between the U.S., Israel and Iran.Irelanddefense contracts and operations in Ireland, has not publicly confirmed Handala’s role.Israelmissile strike on a girl’s school in Iran and the ongoing military conflict between the U.S., Israel and Iran.United StatesStryker, a major medical device manufacturer with U.S.