Stryker Cyberattack: What You Need to Know

A March 11, 2026 incident at Stryker reportedly involved an identity compromise and abuse of Microsoft Intune administrative capabilities to remotely wipe tens of thousands of devices, causing widespread disruption to ordering, manufacturing, and shipping; the Handala group (an Iran-linked persona) claimed responsibility, IoCs and hashes have been published, and Stryker has stated there is no confirmed ransomware or data exfiltration while containment and recovery efforts continue.