Iranian Hackers Suspected in Cyberattack on Medical Giant Stryker

Attack targeted Michigan-based company's Microsoft infrastructure, deleting critical data and disabling phones globally

Mar. 12, 2026 at 4:36pm

Got story updates? Submit your updates here. ›

Medical device manufacturer Stryker Corporation suffered a sophisticated cyberattack on Wednesday that is suspected to have been launched by Iranian hackers. The attack targeted Stryker's Microsoft infrastructure, deleting critical device data and disabling company phones across its global operations. The full scope of the operational and financial impacts are not yet known, but the incident has brought work to a standstill as teams lost access to essential collaboration tools.

Why it matters

If confirmed to have originated in Iran, this attack represents Iran's first substantial cyberoffensive against a US-based company since the conflict between the two nations intensified. The selection of a healthcare technology provider as a target, rather than traditional defense or energy infrastructure, suggests a potential strategic shift in Iran's approach to cyber warfare, demonstrating their capability to disrupt critical civilian infrastructure and supply chains.

The details

The technical nature of the assault appears highly sophisticated. Rather than deploying typical ransomware or conducting data theft operations, the attackers actively deleted information from devices throughout Stryker's network. This destructive methodology indicates the primary objective was maximum operational disruption rather than financial extortion, consistent with state-sponsored cyber operations designed to inflict damage and send geopolitical messages.

  • The cyberattack occurred on Wednesday, March 12, 2026.

The players

Stryker Corporation

A $20 billion medical device manufacturer headquartered in Kalamazoo, Michigan that produces surgical equipment, orthopedic implants, and other medical devices for hospitals worldwide.

Iran

The country suspected to be behind the cyberattack on Stryker Corporation, marking what security analysts identify as Iran's first major digital offensive against a United States corporation since current military tensions began.

Got photos? Submit your photos here. ›

What they’re saying

“We must not let individuals continue to damage private property in San Francisco.”

— Robert Jenkins, San Francisco resident

What’s next

Stryker is working to restore its systems and operations, but has not provided a timeline for full recovery. Security experts will continue to investigate the source and nature of the attack.

The takeaway

This cyberattack highlights the growing threat of nation-state cyber warfare targeting critical civilian infrastructure, and the potential for significant operational and financial disruption to major corporations. It underscores the need for robust cybersecurity measures and preparedness across all industries, especially in the healthcare sector.