Stryker’s electronic ordering systems remain offline a week after a cyberattack that reportedly wiped thousands of company devices by abusing Microsoft Intune’s remote-wipe capability, forcing manual order processing and causing factory closures. The company says its connected medical devices and clinical products were not affected and remain safe to use, while responders reported leaked administrative credentials and a claim of responsibility by the Iranian-aligned group Handala. #Stryker #MicrosoftIntune
Keypoints
- Electronic ordering, shipping, and customer-support systems remain down a week after the attack.
- Thousands of company devices were reportedly wiped via Microsoft Intune’s remote-wipe feature.
- Stryker asserts its connected medical devices and hospital systems were not impacted and are safe to use.
- Cisco Talos and other responders identified leaked administrative credentials suggesting high-level account compromise.
- The Iranian-aligned group Handala claimed responsibility, though Stryker has not completed formal attribution.
Read More: https://therecord.media/stryker-cyberattack-impact-iran