Stryker hit by mysterious cyberattack wiping devices worldwide

Medical technology giant Stryker is facing a major cyberattack affecting its systems worldwide. Employees and contractors reported that devices running Microsoft’s Windows operating system, including laptops, smartphones, and other remote-access hardware, were wiped. The disruption has left staff unable to access critical systems as the company investigates the incident.

The attack appears to be linked to a hacking group with ties to Iran, whose logo reportedly appeared on Stryker’s login screens. The breach was first noticed shortly after midnight on the East Coast, signaling a rapid and coordinated effort to compromise the company’s technology infrastructure.

Widespread impact on operations

The outage has affected Stryker’s global operations, preventing many employees from logging into essential systems. Remote devices, which connect to Stryker’s technology platforms, were among the first to be wiped, creating immediate challenges for staff relying on these tools to perform daily work.

While the full scope of the disruption is still being assessed, the company’s core operations including manufacturing, logistics, and internal communications may be impacted. Analysts note that cyberattacks of this scale can create cascading effects across medical technology supply chains.

Cybersecurity experts weigh in

Security specialists are monitoring the situation closely, pointing to the increasing risk of nation-state-linked cyber activity targeting high-profile technology and healthcare companies. The suspected involvement of an Iran-linked hacking group highlights the geopolitical dimensions of modern cybersecurity threats. Experts caution that companies operating globally must be prepared for sophisticated attacks that can disrupt both digital systems and critical infrastructure.

Ongoing investigation

Stryker has not publicly confirmed all details of the attack but is actively working with cybersecurity teams to contain the breach and restore operations. Employees are advised to follow internal guidance and avoid using compromised devices until further notice. The company is coordinating with law enforcement and cyber intelligence agencies to determine the source and intent of the attack.

Implications for the medtech industry

The incident underscores the vulnerability of medical technology companies to cyber threats, especially when remote devices and cloud-connected systems are involved. Stryker, like many global medtech firms, relies on integrated digital platforms for operations and client services. A breach of this magnitude could temporarily disrupt patient care delivery, equipment management, and internal communications, highlighting the need for robust cybersecurity measures.

This attack comes amid rising concerns about cyber threats targeting healthcare and technology sectors, including ransomware and politically motivated breaches. Companies are increasingly investing in security infrastructure, monitoring, and rapid response strategies to minimize the operational impact of such events.

Next steps for Stryker

Recovery efforts are ongoing, with teams prioritizing data integrity, device restoration, and system access for staff worldwide. The company has indicated that updates will be shared as investigations progress, ensuring transparency with employees, partners, and the public.

The Stryker cyberattack serves as a reminder of the persistent threats facing global technology systems and the importance of preparedness in a digital-first business environment.

Source: The Wall Street Journal