TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Krebs on Security

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

BrianKrebs · 2026-03-11 · Read original ↗

ATT&CK techniques detected

7 predictions
T1485Data Destruction
94%
"iran - backed hackers claim wiper attack on medtech firm stryker a hacktivist group with links to iran ’ s intelligence agencies is claiming responsibility for a data - wiping attack against stryker, a global medical technology company based in michigan. news reports out of irela…"
T1485Data Destruction
61%
"stated, “ we are currently experiencing a building emergency. please try your call again later. ” a report wednesday morning from the irish examiner said stryker staff are now communicating via whatsapp for any updates on when they can return to work. the story quoted an unnamed …"
T1195Supply Chain Compromise
61%
"on the ecg. ” this is a developing story. updates will be noted with a timestamp. update, 2 : 54 p. m. et : added comment from riggi and perspectives on this attack ’ s potential to turn into a supply - chain problem for the healthcare system. update, mar. 12, 7 : 59 a. m. et : a…"
T1485Data Destruction
49%
"attack against medical technology maker stryker. “ all the acquired data is now in the hands of the free people of the world, ready to be used for the true advancement of humanity and the exposure of injustice and corruption, ” a portion of the handala statement reads. the group …"
T1195Supply Chain Compromise
45%
"orthospace. stryker is a major supplier of medical devices, and the ongoing attack is already affecting healthcare providers. one healthcare professional at a major university medical system in the united states told krebsonsecurity they are currently unable to order surgical sup…"
T1592.004Client Configurations
37%
"attack against medical technology maker stryker. “ all the acquired data is now in the hands of the free people of the world, ready to be used for the true advancement of humanity and the exposure of injustice and corruption, ” a portion of the handala statement reads. the group …"
T1195.002Compromise Software Supply Chain
32%
"orthospace. stryker is a major supplier of medical devices, and the ongoing attack is already affecting healthcare providers. one healthcare professional at a major university medical system in the united states told krebsonsecurity they are currently unable to order surgical sup…"

Summary

A hacktivist group with links to Iran's intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medical technology company based in Michigan. News reports out of Ireland, Stryker's largest hub outside of the United States, said the company sent home more than 5,000 workers there today. Meanwhile, a voicemail message at Stryker's main U.S. headquarters says the company is currently experiencing a building emergency.