Iran-linked hackers tied to a cyberattack on U.S. company Stryker

(NewsNation) — An Iranian-linked hacking group has carried out a cyberattack on U.S.-based medical equipment company Stryker, shutting down technology operations across its global offices.

The attack disrupted operations for thousands of employees who were unable to access company systems, reported The Wall Street Journal. 

NewsNation affiliate Wood reported that Iranian-linked cyber group Handala claimed responsibility for the attack on social media, calling it retaliation “for the brutal attack on the Minab school and in response to ongoing cyber assaults against the infrastructure of the Axis of Resistance.” 

A Stryker spokesperson told the Wall Street Journal that it is working to restore systems.

“Our teams are actively working to restore systems and operations as quickly as possible. Stryker has business continuity measures in place, and we’re committed to continuing to serve our customers,” the spokesperson said.

Employees found remote devices running Microsoft Windows, including cellphones and laptops connected to Stryker systems, had been wiped, the outlet reported.

Stryker is headquartered in Kalamazoo, Michigan and develops medical technology products in MedSurg, neurotechnology and orthopaedics. The company operates in more than 60 countries and employs over 56,000 people.

Before Stryker’s shutdown, FBI Director Kash Patel said Tuesday that the “FBI is working 24/7 to stay ahead of the threat and implement a sweeping Cyber strategy pursuant to President Trump’s ‘Cyber Strategy for America’,” in post on X.  

“The goal is clear: impose real cost on those who target Americans in cyberspace by dismantling their networks, pursuing the hackers and spies behind them, and degrading their capacity to operate.” 

Handala had previously claimed several high-profile cyber operations, most notably in Israel.

Iran has increasingly turned to cyber warfare, particularly after the 2010 Stuxnet attack, attributed to the U.S. and Israel, which damaged Iran’s nuclear program and heightened the nation’s investment in cyber warfare capabilities, according to a report by the Georgetown Security Studies Review.

“Not only is Iran able to counter-strike its most formidable allies, but since the outbreak of the Israel Hamas War, Iran’s cyber strategy and tactics have aligned with its military goals. This alignment suggests Tehran has set common objectives for its domestic stability, territorial integrity, and foreign policy,” the report states.

Iran built up cyber units within the Islamic Revolutionary Guard Corps and the Ministry of Intelligence and Security while also working with proxy hacker groups and contractors, the report notes.

Over the past decade, Iranian cyber activity has evolved from espionage and influence campaigns to more disruptive attacks, including the 2012 Shamoon malware attack on Saudi Aramco and attacks on U.S. banks.

The cyberattack on Stryker comes weeks after the U.S and Israel jointly launched a coordinated attack on Iran.

The U.S. military has struck more than 5,000 Iranian sites since its so-called “Operation Epic Fury” began, including downing over 50 Iranian ships, according to U.S. Central Command.

On Tuesday, Iran launched new retaliatory attacks on Israel, the United Arab Emirates, Bahrain, Saudi Arabia and Kuwait, according to officials from those countries.

Iran’s parliament speaker, Mohammad Bagher Qalibaf, said the country is “definitely not looking for a ceasefire” to end the war, which kicked off after joint U.S.-Israel strikes on Iran on the final day of February.

This is a developing story. Check back for updates.

Copyright 2026 Nexstar Media Inc. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.

Key takeaways from Tuesday’s elections: Georgia, Mississippi, New Hampshire

FBI warns Iran ‘aspired’ to strike California coast with drones

A mega-deal to end the war

Republicans block Democratic bill to fund DHS agencies other than ICE, CBP

Thune quashes Trump push to reform filibuster for SAVE Act

The return-to-the-office trend backfires

Odds of a ‘Super El Nino’ growing, model shows. What that could mean

Swalwell says staffer flew to Colombia to return hearing aid to deported ...

Live updates: Trump heads to Massie’s Kentucky district, says oil prices will ...

Live results: Georgia special election to replace Marjorie Taylor Greene

Erika Kirk appointed to Air Force Academy board

Democratic senator: ‘We seem to be’ on path toward deploying US troops on ...

Trump heads to Kentucky in an aggressive effort to topple a foe: GOP ...

Trump support for warrantless spy powers could jeopardize Democratic backing

Speaker Johnson floats using reconciliation to address alleged fraud in blue ...

Tillis urges DOJ to end Fed probe after meeting with Trump nominee

Watch live: Trump touts economic agenda in Massie’s Kentucky

GOP senator on Iran school strike: ‘A terrible, terrible mistake’

© The Hill