A cyberattack on the medical technology firm Stryker has been attributed to the Handala Team, a group linked to Iran's Intelligence Ministry. This incident marks a notable escalation in Iranian cyber operations against U.S. entities amid ongoing conflict between the nations. The attack disrupted communications for Stryker employees, rendering their work-issued phones inoperable.
Historically, Iran has executed significant cyberattacks aimed at erasing data from its adversaries, with past targets including Saudi Aramco and the Sands Casino. However, prior to this incident, Iranian hacker groups had conducted only minor attacks related to the war, primarily manifesting as website alterations.
On March 11, 2026, details emerged indicating that the hackers likely accessed Stryker’s Microsoft Intune account, leading to the deletion of data on several devices. As the situation develops, cybersecurity firms note a shift in the nature of Iranian cyber activities, suggesting more aggressive tactics may be employed in the future.