Other
Stryker Wiper Attack Aftermath β Lawsuits Filed as Hackers Boast
Primary Source βIncident Details
In the weeks following Stryker’s March 2026 Handala wiper attack (documented separately), multiple lawsuits
were filed against Stryker as the Iranian-linked Handala group continued to boast about the attack on social
media and dark web channels. Handala published additional stolen materials and claimed ongoing access to
Stryker systems. Stryker β the $22B medical technology company β continued recovery operations across global
IT systems disrupted by the Intune MDM wiper. The lawsuits alleged Stryker failed to adequately protect its
MDM infrastructure against nation-state attacks. The attack drew significant attention to the vulnerability of
enterprise MDM platforms as attack surfaces and the specific risk from Iran-linked actors targeting US medical
technology companies during heightened geopolitical tensions.
Technical Details
- Initial Attack Vector
- Handala (Iran-linked hacktivist group) deployed a wiper attack against Stryker's Microsoft Intune MDM infrastructure; subsequent lawsuits and ongoing recovery documented
Timeline
- 2026-03-18 Breach occurred
- 2026-03-18 Publicly disclosed