Stryker: IT systems deleted after cyberattack by suspected Iranian actors
Medical device manufacturer Stryker admits a serious IT incident. The Iranian cyber gang Handala claims to be behind it.
(Image: Panorama Images/Shutterstock.com)
US medical device manufacturer Stryker, with an annual turnover of 25.1 billion US dollars and 56.000 employees in 2025, a relatively large company also active at several locations in Germany, has fallen victim to a cyberattack. On Thursday of this week, Stryker confirmed the cyberattack on its IT systems claimed by the Handala cyber gang, which is located in Iran.
According to reports, a cyberattack on Stryker's computer systems on Wednesday of this week led to a widespread disruption of business processes, including order processing, production, and shipping, reports Reuters. The Iranian cyber gang Handala claims to be responsible for the attack. It was allegedly carried out in retaliation for an attack on a girls' school in Minab in southern Iran at the end of February.
"Global disruption to Microsoft environment"
Stryker stated to US media on Wednesday that it was experiencing a "global disruption to its Microsoft environment." IT journalist Brian Krebs specifies that it is a wiper attack, in which more than 200.000 systems, servers, and mobile devices of the company are said to have been deleted. An employee of the company reportedly told the Irish Examiner that all devices connected to the company network were "down" and every device with Microsoft Outlook on it was deleted.
The login websites were defaced with the Handala group's logo. In a statement to Krebs, an anonymous but trusted source indicated that the cybercriminals used Microsoft's Intune service to remotely wipe all connected devices. This is a well-known and widely used cloud-based network, software, and device management software from Microsoft.
However, the incident did not affect patient-related services and associated medical products, Stryker explained. The full extent and financial consequences are not yet foreseeable. Investigations are ongoing.
Videos by heise
Stryker has not yet responded to a request from heise online. It is possible that the German branches are also affected.
(dmk)
