Iranian hacker group claims responsibility for wiping out medtech firm Stryker

[thewayne]

Stryker is a global firm with facilities in 79 countries and over $25 billion in revenue. And a group that calls themselves Handala claims to have infiltrated them and launched a wiper attack after exfiltrating data. They used Microsoft's Intune service to execute remote wipe commands against any device that is running Outlook.

50 gigabytes of data. POOF. Now we shall see how good of a data/disaster recovery plan and whether they've practiced it.

Among Stryker's lines of business were providing supplies to hospitals, and also transmitting EKG data from field paramedics to hospitals. Supply ordering is unavailable with their systems down, and hospitals are disconnecting the non-working EKG link for fear of the wiper getting into their system.

Handala's published claim of responsibility calls Stryker a 'Zionist-rooted corporation', apparently they bought an Israel-based medtech company a few years ago.

https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/

Comments

[thewayne]

I must have misread the article, or perhaps there was a typo.  I thought 50 gig was rather small.  Yeah, it is odd that if you're going to do an IT strike in retaliation for the bombing of the school, Raytheon or equivalent would make a lot more sense.  I would guess that perhaps they were already inside Stryker, so it was an easy target to wipe.