Iran-linked group Handala claims cyberattack causing global disruption at medical device maker Stryker
The Facts
- Stryker reported a cybersecurity incident/cyberattack that caused a global disruption to its Microsoft environment and affected access to some IT systems.
- Stryker said it has no indication of ransomware or malware and believes the incident is contained.
- An Iran-linked hacking group known as Handala claimed responsibility for the cyberattack on Stryker via social media/Telegram statements.
- Reports said the Handala logo appeared on Stryker login pages during the incident.
- The disruption left thousands of Stryker employees unable to access company systems, according to reporting citing the Wall Street Journal and other outlets.
- Handala said it extracted 50 terabytes of data in connection with the attack.
Context
What has Stryker said publicly about the incident?
Stryker said a cyberattack/cybersecurity incident caused a global disruption to its Microsoft environment; it activated its response plan, began an investigation with outside experts, and stated it has no indication of ransomware or malware and believes the incident is contained. CBS News Investing.com
Who is claiming responsibility, and what motive did they give?
A group calling itself Handala, described in multiple reports as Iran-linked, claimed responsibility and said the attack was retaliation related to military strikes on Iran and what it called ongoing cyber assaults against the “Axis of Resistance.” Hindu Hill News18
The receipts — all 100 sources
Wire services (5)
Independent coverage (50)
Facts first. Then every angle.
The day’s biggest stories in one short brief — the facts everyone agrees on, then the competing values behind the headlines. Free in your inbox.