A hacking crew with ties to Iran's intelligence agency claimed to be behind a global network outage at med-tech firm Stryker on Wednesday, and said the cyberattack was in response to the US-Israel airstrikes.

If true, the incident would mark a major escalation in the [1]war's cyber component , and could be the first destructive cyberattack linked directly to the current war to hit a major US company.

In a Wednesday [2]statement , Stryker said it was "experiencing a global network disruption to our Microsoft environment as a result of a cyber attack," adding that there is no indication of a ransomware infection or any other type of malware deployment.

[3]

Initial reports from Irish news outlets indicated that [4]Stryker employees' devices , including their personal phones, were wiped in the attack.

[5]

[6]

The medical equipment maker said that it believes the security incident has been contained, and continues investigating the impact on its systems.

Stryker did not immediately respond to The Register 's questions about the cyberattack, including whether Handala, an Iranian hacktivist group believed to be a [7]front for the Ministry of Intelligence and Security (MOIS) , was responsible for the incident.

[8]

"If accurate, Handala's alleged disruptive attack on Stryker marks a significant escalation - this is the first time this Iranian-backed threat actor has disruptively targeted a major US enterprise," Check Point Research threat intelligence group manager Sergey Shykevich told The Register .

"The fact that they've set their sights on a major medical device company is particularly alarming," Shykevich added. "Critical healthcare infrastructure represents a high-value, high-impact target: disruption doesn't just mean data loss, it can mean patient safety. This should serve as a wake-up call for the entire medtech sector to urgently reassess their threat landscape - nation-state actors are no longer someone else's problem."

Handala, in a lengthy post on its now-deleted Telegram channel and also shared on X, claimed it [9]wiped more than 200,000 systems and servers, and stole 50 TB of "critical data." The group said the hack was "in retaliation for the brutal attack on the Minab school and in response to ongoing cyber assaults against the infrastructure of the Axis of Resistance."

[10]Cybercrime isn't just a cover for Iran's government goons - it's a key part of their operations

[11]Iran's cyberwar has begun

[12]Iran intelligence backdoored US bank, airport, software outfit networks

[13]Iran is the first out-loud cyberwar the US has fought

At least 175 people, most of them children, were reportedly killed in what appears to have been a Tomahawk missile strike on an Iranian elementary school in Minab when the US military may have mistakenly targeted the area. The school was adjacent to, and may once have been part of, an Iranian military compound.

The crew also [14]claimed to have breached payment device maker Verifone, and released screenshots (seen by The Register ) that appeared to show the company's internal systems with a Handala Hack logo overlay.

[15]

Verifone, in a statement to The Register , refuted the hacktivists' claims.

"We have observed recent allegations on March 11, 2026 from threat actors claiming an intrusion into our systems in Israel," a Verifone spokesperson said. "Verifone has found no evidence of any incident related to this claim and has no service disruption to our clients." ®

Get our [16]Tech Resources



[1] https://www.theregister.com/2026/03/02/cyber_warfighters_iran/

[2] https://www.stryker.com/us/en/about/news/2026/a-message-to-our-customers-03-2026.html

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2abH0EuBacxEB6H7RLVPRbgAAAMw&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://www.irishmirror.ie/news/irish-news/stryker-cyber-attack-thousands-irish-36850017

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44abH0EuBacxEB6H7RLVPRbgAAAMw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33abH0EuBacxEB6H7RLVPRbgAAAMw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2026/03/10/cybercrime_iran_mois/

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44abH0EuBacxEB6H7RLVPRbgAAAMw&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[9] https://x.com/HPRNEW/status/2031723940360355898

[10] https://www.theregister.com/2026/03/10/cybercrime_iran_mois/

[11] https://www.theregister.com/2026/03/02/cyber_warfighters_iran/

[12] https://www.theregister.com/2026/03/05/mudywater_backdoor_us_networks/

[13] https://www.theregister.com/2026/03/09/kettle_2026_episode_01_iran_war/

[14] https://x.com/HPRNEW/status/2031760955277722099

[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33abH0EuBacxEB6H7RLVPRbgAAAMw&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[16] https://whitepapers.theregister.com/