U.S. healthcare firm Stryker suffers cyberattack linked to Iran. Experts warn modern wars may now target critical digital infrastructure.

U.S. Health Tech Giant Stryker Struck by Cyberattack

A major cyberattack has hit U.S.-based healthcare technology leader Stryker, with a group linked to Iran claiming responsibility. The incident has raised alarms about the possibility that modern conflicts are increasingly moving online, targeting not just military assets but civilian infrastructure as well.

The Michigan-headquartered company, which employs 56,000 people and operates in 61 countries, told the Securities and Exchange Commission (SEC) that access to some of its systems was disrupted. A full timeline for restoring operations remains unclear.

“Stryker is responding to a global network disruption to our Microsoft environment as a result of a cyber attack. We have no indication of ransomware or malware and believe the incident is contained,” the company said Thursday.

How the Attack Unfolded

Although the breach seems confined to Stryker’s internal network, experts warn that the ripple effect could be significant across healthcare providers.

Ali Dehghantanha, Canada Research Chair in cybersecurity at the University of Guelph, explained that attacks on key healthcare firms can impact hospitals and medical services far beyond the initial target.

“Modern wars are increasingly fought through code targeting the digital infrastructure that societies rely on,” he said.

Employees reported seeing the logo of an Iran-linked hacking group on Stryker’s login screens. The group, known as Handala, claimed responsibility via its Telegram channel, stating the attack was retaliation for a strike on a girls’ school in Minab, southern Iran, which reportedly killed around 150 students. This figure has not been independently verified.

The network outages began just after midnight Wednesday on the U.S. East Coast. Remote devices running Windows, including laptops and smartphones, connected to Stryker’s systems were reportedly wiped.

A White House official told Reuters that the administration is “proactively monitoring potential cyber threats and driving a response with our world-class critical infrastructure, regulatory agencies, and law enforcement entities.”

A Pattern of Proxy Cyberwarfare

Dehghantanha noted that attacks like this follow a broader pattern in global cyber conflicts, often carried out through proxy groups.

“China, Russia, Iran, and North Korea have all used similar tactics. While groups like Handala claim independent motives, their actions often align with state interests,” he said.

He described this type of cyber activity as part of the “grey zone” of warfare: not formally a declaration of war, but a clear exercise of geopolitical pressure through digital means.

Canadian Officials Urge Vigilance

The Canadian Cyber Security Centre has warned operators of critical infrastructure to stay alert as tensions escalate in the Iran conflict. A recent bulletin stated that Iran “will very likely use its cyber program to respond to the joint U.S. and Israel combat operations.”

Dehghantanha added that hospitals, energy systems, and supply chains could become increasingly targeted by Iranian-backed hackers.

“These attacks may intensify as the conflict continues, showing that modern warfare isn’t just about tanks and missiles—it’s also about who can dominate digital space.”