Stryker Reports Global Network Disruption After Handala Claims Cyberattack
Summary
Stryker said a cyberattack caused a global Microsoft environment disruption and that the incident appeared contained. Handala claimed it wiped systems and stole data, but those claims remain difficult to verify.
Key points
- Stryker said a cyberattack caused a global network disruption affecting its Microsoft environment and that it believed the incident was contained.
- Handala claimed it wiped more than 200,000 systems, forced office shutdowns in 79 countries and stole 50TB of data; the claims are unverified.
- The Wall Street Journal reported that staff and contractors saw the Handala logo on login pages and that devices configured to connect to Stryker’s network were wiped.
- Stryker said it had no indication of ransomware or malware.
- Stryker reportedly advised workers not to turn on company devices and to disconnect them from networks.
Article Details
- Victim Organization
- Stryker
- Incident Type
- Disruptive cyberattack causing a global network outage; destructive activity was reported, while Handala's claims of wiping systems and stealing data remain unverified.
- Data Types Exposed
- Unspecified company data (Handala claimed it was stolen; unverified)
- Affected Data Size
- Handala claimed to have stolen 50 TB of data; this claim is unverified.
- Operational Impact
- Stryker confirmed a global network disruption affecting its Microsoft environment. The Wall Street Journal reported that staff and contractors saw the Handala logo on login pages and that phones, laptops, and other network-connected devices were reportedly wiped. Windows systems appeared particularly affected. Handala claimed more than 200,000 servers, mobile devices, and other systems were wiped and offices in 79 countries were forced to shut down; those details were not independently verified in the article. Stryker advised workers not to turn on company devices and to disconnect them from networks.
- Ransom Or Extortion
- No ransom demand was reported. Handala claimed data theft; the claim is unverified.
- Claim Status
- confirmed
MITRE ATT&CK
Threat Actors
HandalaThe Iran-linked hacker group claimed responsibility for the attack and claimed to have wiped systems and stolen 50 TB of data. Stryker confirmed a cyber incident and global network disruption, but Handala's specific claims were not independently verified in the article.Void ManticoreThe article says many in the cybersecurity community believe Handala is a front for Void Manticore, which it describes as sponsored by the Iranian government; this relationship is presented as a belief, not confirmed attribution.