What’s known about wiper attack on Stryker, a major supplier of lifesaving devices

In the wake of recent airstrikes by the US and Israel on Iran, cybersecurity experts issued warnings to organizations worldwide about the risk of retaliatory cyberattacks. Those predictions materialized just days later when Stryker, a prominent manufacturer of medical devices, reported a significant cyber incident that disrupted much of its infrastructure. On Wednesday, the hacking group Handala Hack, which has ties to the Iranian government, claimed responsibility for the attack. Initial reports emerged from social media and an Irish news outlet, detailing how employees at Stryker experienced wiped devices, including phones and computers. According to these accounts, some workers noticed login screens adorned with the Handala Hack logo on their erased equipment. Stryker released a statement on Thursday, addressing the ongoing situation as a "global network disruption" affecting their Microsoft environment due to the cyberattack. The company emphasized that there were no indications of ransomware or malware, which are typically associated with such incidents. The response team believes the attack has been contained within the internal Microsoft infrastructure. Despite the chaos, Stryker assured that their critical medical devices, including Lifepak, Lifenet, and Mako, remained operational. These devices are essential for monitoring heart conditions, managing patient information in real-time, and assisting in surgical procedures. However, in a filing with the Securities and Exchange Commission, Stryker revealed that they could not provide a timeline for returning to normal operations. The incident underscores the growing cyber threats associated with geopolitical tensions, raising concerns for organizations globally.