logo

March 2026: Wiper Attack Paralyzes Stryker as BPO Breaches & Data Thefts Sweep the Month

ID: 896cc9c1-2410-5185-8daf-ea32b357100c

STIX ID: report--896cc9c1-2410-5185-8daf-ea32b357100c

Feed Name: SOCRadar Blog

Threat Score
92/100

Date Published: 2026-04-30

Date Updated: 2026-05-03

Author: Ameer Owda

...
...

March 2026 saw numerous large-scale and high-impact cyber incidents: an Iran-linked hacktivist group (Handala) used Microsoft Intune to wipe >80,000 Stryker devices across 79 countries; the ShinyHunters extortion gang exfiltrated hundreds of terabytes (claiming up to 1 PB) from Telus Digital; TeamPCP conducted a cascading software supply-chain compromise affecting Trivy, Checkmarx, npm/PyPI/docker ecosystems and harvested credentials; multiple breaches and vulnerabilities exposed millions of individuals' records (Navia, TriZetto, University of Hawaii Cancer Center, Crunchyroll via a BPO), highlighting severe supply-chain, credential-theft, and API authorization failures with significant operational and privacy impacts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.