Professional-Iran hacktivist group says it's behind assault on medical tech big Stryker

[ad_1] A gaggle of Iran-linked hackers say they've damaged into the servers of U.S. medical tech big Stryker, inflicting disruptions worldwide. As of Wednesday morning, a lot of Stryker’s international programs have been wiped, and a few login pages are as an alternative displaying the emblem of the hacker group.

The hacktivist group, referred to as Handala, claimed accountability for the assault in a message posted on an X account purporting to belong to the group. The hackers wrote that they attacked Stryker “in retaliation for the brutal assault on the Minab college and in response to ongoing cyber assaults towards the infrastructure” of Iran and its allies. The hackers had been referring to the Minab ladies college in Tehran, which the U.S. army reportedly bombed in its latest assaults on Iran, killing greater than 175 individuals, most of them youngsters.

Stryker, which makes medical gadgets and expertise for hospitals, doesn't look like straight linked to the latest assaults on Iran, although it has operations in Israel and did final 12 months safe a $450 million contract from the Division of Protection to produce medical gadgets to the U.S. army.

“On this operation, over 200,000 programs, servers, and cellular gadgets have been wiped and 50 terabytes of vital knowledge have been extracted. Stryker’s places of work in 79 nations have been pressured to close down,” the hackers wrote.

The hackers’ claims look like at the very least partly credible. Based on The Wall Road Journal, some Stryker programs all around the world have been wiped, and others are displaying the emblem of the hackers group on login pages.

“Our groups are actively working to revive programs and operations as rapidly as potential. Stryker has enterprise continuity measures in place, and we’re dedicated to persevering with to serve our prospects,” a Stryker spokesperson instructed the Journal.

“Stryker is at the moment experiencing a extreme, international disruption throughout the Home windows atmosphere impacting each consumer gadgets and servers,” learn a discover despatched to workers, in response to the WSJ. “The problem is widespread and considerably affecting customers’ capacity to entry programs and providers.”

Techcrunch occasion

San Francisco, CA | October 13-15, 2026

The corporate didn't instantly reply to TechCrunch’s request for remark. The U.S. Cybersecurity and Infrastructure Safety Company, which responds to cyberattacks, didn't reply to a request for remark.

Based on the IBM X-Drive Change, Handala emerged after Hamas’ October 7 assault on Israel and has focused Israeli civilian infrastructure, vitality corporations within the Gulf area, and Western organizations. “Its operations concentrate on producing disruptive and psychological influence,” the corporate wrote on the change, which tracks menace teams. “Handala employs a broad and evolving toolkit, together with phishing, customized wiper malware, ransomware‑model extortion, knowledge theft, and hack‑and‑leak exercise. Its campaigns constantly function ideological messaging, inflated or deceptive breach claims, and deliberate concentrating on of life‑vital sectors equivalent to healthcare and vitality.”

Handala additionally has an internet site that lists and doxes dozens of Israelis who allegedly work or used to work for the Israeli Protection Forces, in addition to main native protection and surveillance contractors, equivalent to Elbit Techniques and NSO Group.

Israeli cybersecurity agency Examine Level wrote in a latest report that for the reason that begin of the battle in Iran, Handala is “breaking into low-hanging programs, conducting hack-and-leak exercise, and timing the publication of stolen materials to maximise strain.”