An Iranian-linked hacking group carried out a cyberattack on Stryker, one of the world's largest medical technology companies, disrupting operations across its global offices and leaving thousands of employees unable to access company systems.
The attack, claimed by the Iranian-linked cyber group Handala, reportedly wiped remote devices running Microsoft Windows, including company-issued cellphones and laptops connected to Stryker's network. A Stryker spokesperson confirmed the company is working to restore systems and has business continuity measures in place.
What the Right Is Saying
Conservative lawmakers and national security hawks have called for a tougher stance against Iranian cyber operations. Senator Marco Rubio, R-Fla., has long advocated for aggressive responses to foreign cyber threats, arguing that the U.S. must impose real costs on nation-state hackers targeting American companies.
FBI Director Kash Patel outlined the administration's approach in a post on X, stating that the bureau is working '24/7 to stay ahead of the threat' under President Trump's Cyber Strategy for America. The goal, according to Patel, is to 'impose real cost on those who target Americans in cyberspace by dismantling their networks, pursuing the hackers and spies behind them, and degrading their capacity to operate.'
Conservative commentators have linked the Stryker attack to broader tensions in the Middle East, noting that Iran has increasingly turned to cyber warfare as a tool of asymmetric conflict. Former NSA director Michael Rogers has testified that Iran views cyber operations as a lower-cost alternative to conventional military action, allowing the regime to project power without risking direct confrontation.
What the Left Is Saying
Progressive voices and cybersecurity experts have emphasized the growing threat posed by foreign state-sponsored hackers to critical American infrastructure. Senator Ron Wyden, D-Ore., has previously called for stronger cybersecurity requirements for critical industries, arguing that companies handling sensitive medical technology must have robust defenses against foreign adversaries.
The attack on Stryker highlights vulnerabilities in the healthcare sector, which has seen a surge in ransomware and espionage attempts. Privacy advocates have raised concerns about the potential exposure of patient data and medical research in such attacks, noting that healthcare organizations remain prime targets for nation-state actors.
Progressive lawmakers have also pointed to the need for international cooperation on cyber norms, arguing that diplomatic engagement alongside technical defenses is essential to deter future attacks. The Georgetown Security Studies Review noted that Iran's cyber strategy has aligned with its military objectives since the Israel-Hamas war began, suggesting a coordinated approach to asymmetric warfare.
What the Numbers Show
Stryker, headquartered in Kalamazoo, Michigan, operates in more than 60 countries and employs over 56,000 people worldwide. The company develops medical technology products across three main divisions: MedSurg, neurotechnology and orthopaedics.
The attack comes amid a significant escalation in U.S. military operations against Iranian targets. According to U.S. Central Command, American forces have struck more than 5,000 Iranian sites since Operation Epic Fury began, including the destruction of over 50 Iranian ships. On Tuesday, Iran launched retaliatory attacks on Israel, the United Arab Emirates, Bahrain, Saudi Arabia and Kuwait.
Iran's cyber capabilities have grown substantially since the 2010 Stuxnet attack, which damaged its nuclear program. According to the Georgetown Security Studies Review, Iran has built up cyber units within the Islamic Revolutionary Guard Corps and the Ministry of Intelligence and Security while working with proxy hacker groups. The country's cyber activity has evolved from primarily espionage operations to more disruptive attacks, including the 2012 Shamoon malware attack on Saudi Aramco and attacks on U.S. banks.
The Bottom Line
The cyberattack on Stryker represents one of the most significant Iranian-linked hacking incidents against American critical infrastructure in recent memory. The attack demonstrates Iran's growing sophistication in cyber warfare and its willingness to target civilian companies in retaliation for military actions.
Stryker has stated that it is working to restore systems and maintain operations, though the full timeline for recovery remains unclear. The incident underscores ongoing vulnerabilities in the healthcare sector and raises questions about whether current cybersecurity measures are sufficient to deter foreign state-sponsored attacks. The attack occurs against the backdrop of escalating tensions in the Middle East, with both kinetic and cyber operations intensifying as the conflict continues to unfold.
The FBI's Cyber Strategy remains the primary framework for responding to such incidents, though critics question whether diplomatic and military tools are adequately coordinated. This is a developing story.