STRYKER , a MedTech giant, says it has been targeted by a highly disruptive cyberattack claimed by an Iran-linked hacker group named Handala. Handala claims to have wiped more than 200,000 servers, mobile devices and other systems, forcing Stryker to shut down offices in 79 countries and allegedly stealing 50TB of data. The group has also been active since the start of the US-Israel-Iran conflict, according to SecurityWeek’s coverage.
The attack reportedly wiped devices configured to connect to Stryker’s network, with Windows systems said to have been hit particularly hard, and The Wall Street Journal reported that Stryker confirmed dealing with a cyber incident that resulted in a global outage, with the Handala logo appearing on login pages. SecurityWeek notes that Handala has been closely monitored by cybersecurity firms, with some suggesting it may be a front for the Iran-sponsored threat actor Void Manticore.