Handala Pro-Iran Hacktivist Group Targets Stryker With Cyber Attack Wipe

SentiSense · Published Mar 11, 2026, 5:56 PM ET · Updated May 13, 2026, 1:49 PM ET

Stryker experienced a widespread cyber disruption when a suspected Iranian-linked hacking group, Handala, wiped its global technology systems. Employees found their Windows devices disabled and login pages displayed the group's logo. This incident led to a 3.82% decline in Stryker's stock price.

SYK, a major medical equipment maker, faced a significant cyber attack linked to a pro-Iran hacking group called Handala. The group claimed responsibility on TechCrunch, stating the attack was in retaliation for a U.S. strike on a Tehran school. The attack caused a widespread disruption affecting Stryker's global technology systems, with employees finding their Windows devices wiped and login pages displaying the Handala logo.

Employees were instructed to disconnect from corporate networks and not power on company devices as the company worked to contain the incident. Reports suggest pro-Iran hackers may have used wiper malware in the attack, a destructive tool designed to permanently erase data rather than hold it for ransom. Armadin CEO Kevin Mandia discussed the broader trend of Iranian-linked cyberattacks targeting U.S. tech firms and companies on Fox Business.

Stryker's stock fell 3.82% to $344.96 on the day of the attack, reflecting investor concern about operational disruption and potential data loss. The incident highlights growing geopolitical cyber risk for U.S. companies, particularly in the healthcare and defense-adjacent sectors, and may prompt increased cybersecurity spending industry-wide.