Iran-Linked Hackers Claim Cyberattack Behind Stryker Network Outage

A hacking group claiming links to Iranian intelligence said it was responsible for a cyberattack that disrupted the global network of medical technology company Stryker, in what it described as retaliation for recent U.S.-Israel military strikes.

Stryker confirmed on Wednesday that it was experiencing a global network disruption affecting its Microsoft environment following a cyber incident.

The company said there was no indication of ransomware or other malware deployment, and that it believes the incident has been contained while investigations continue.

If verified, the attack could represent a significant escalation in the cyber dimension of the conflict between Iran and its adversaries and may be one of the first cyber incidents linked directly to the current hostilities to affect a major U.S. company.

Responsibility for the attack was claimed by Handala, an Iranian-aligned hacktivist group, in posts shared on Telegram and the social platform X before the Telegram account was removed.

The group alleged it had wiped more than 200,000 systems and servers and stolen around 50 terabytes of data, though these claims have not been independently verified.

According to initial media reports, the disruption may have affected devices used by employees, including personal phones connected to company systems, though the extent of the impact remains unclear.

In its statement, Stryker said it is continuing to assess the incident and determine whether any sensitive data or operational systems were affected.

The hackers said the attack was carried out in response to what they described as military actions targeting Iranian infrastructure. The group referenced an alleged missile strike on a school in the Iranian city of Minab that reportedly caused heavy civilian casualties.

Cybersecurity analysts have warned that geopolitical conflicts increasingly spill into cyberspace, with hacktivist groups and state-aligned actors launching retaliatory cyber operations against government agencies, companies and critical infrastructure.

The incident comes amid heightened global tensions following ongoing military exchanges involving Iran, Israel and the United States. Authorities have not publicly attributed the attack or confirmed the claims made by the hacking group.