Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker
Summary: An Iran-linked hacktivist group called Handala claimed responsibility for a data-wiping attack on Stryker, a Michigan medical technology company with $25 billion in global sales, saying it erased data from more than 200,000 systems, servers and mobile devices across offices in 79 countries. A source told KrebsOnSecurity the attackers appear to have used Microsoft Intune to issue a remote wipe command against connected devices, and Stryker sent home more than 5,000 workers at its Irish hub while some hospitals suspended connections to its LifeNet service that transmits EKGs to emergency physicians.
Key Takeaway: A single cloud management console was reportedly enough to wipe devices across 79 countries, and the fallout already reaches U.S. surgical supply ordering and the EKG transmissions hospitals rely on to speed heart attack treatment.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026