U.S. Health Tech Giant Stryker Struck by Cyberattack

A major cyberattack has hit U.S.-based healthcare technology leader Stryker, with a group linked to Iran claiming responsibility. The incident has raised alarms about the possibility that modern conflicts are increasingly moving online, targeting not just military assets but civilian infrastructure as well.

The Michigan-headquartered company, which employs 56,000 people and operates in 61 countries, told the Securities and Exchange Commission (SEC) that access to some of its systems was disrupted. A full timeline for restoring operations remains unclear.

“Stryker is responding to a global network disruption to our Microsoft environment as a result of a cyber attack. We have no indication of ransomware or malware and believe the incident is contained,” the company said Thursday.

How the Attack Unfolded

Although the breach seems confined to Stryker’s internal network, experts warn that the ripple effect could be significant across healthcare providers.

Ali Dehghantanha, Canada Research Chair in cybersecurity at the University of Guelph, explained that attacks on key healthcare firms can impact hospitals and medical services far beyond the initial target.

“Modern wars are increasingly fought through code targeting the digital infrastructure that societies rely on,” he said.

Employees reported seeing the logo of an Iran-linked hacking group on Stryker’s login screens. The group, known as Handala, claimed responsibility via its Telegram channel, stating the attack was retaliation for a strike on a girls’ school in Minab, southern Iran, which reportedly killed around 150 students. This figure has not been independently verified.

The network outages began just after midnight Wednesday on the U.S. East Coast. Remote devices running Windows, including laptops and smartphones, connected to Stryker’s systems were reportedly wiped.

A White House official told Reuters that the administration is “proactively monitoring potential cyber threats and driving a response with our world-class critical infrastructure, regulatory agencies, and law enforcement entities.”

A Pattern of Proxy Cyberwarfare

Dehghantanha noted that attacks like this follow a broader pattern in global cyber conflicts, often carried out through proxy groups.

“China, Russia, Iran, and North Korea have all used similar tactics. While groups like Handala claim independent motives, their actions often align with state interests,” he said.

He described this type of cyber activity as part of the “grey zone” of warfare: not formally a declaration of war, but a clear exercise of geopolitical pressure through digital means.

Canadian Officials Urge Vigilance

The Canadian Cyber Security Centre has warned operators of critical infrastructure to stay alert as tensions escalate in the Iran conflict. A recent bulletin stated that Iran “will very likely use its cyber program to respond to the joint U.S. and Israel combat operations.”

Dehghantanha added that hospitals, energy systems, and supply chains could become increasingly targeted by Iranian-backed hackers.

“These attacks may intensify as the conflict continues, showing that modern warfare isn’t just about tanks and missiles—it’s also about who can dominate digital space.”

The post Cyberattack Hits U.S. Health Giant: Is Iran Escalating? first appeared on Maple News Wire.

Data Breach Discovered

WestJet has confirmed that a cyberattack earlier this year resulted in the theft of some passenger personal information, including passport details. The airline said Monday that while payment card data and account passwords were not compromised, other sensitive information was accessed.

Nature of the Stolen Information

The breach exposed varying data depending on the passenger, potentially including full name, date of birth, email, mailing address, phone number, gender, recent travel booking history, and booking reference numbers. WestJet also confirmed that travel document details, such as passports or government-issued IDs, may have been taken.

Security Risks and Response

The airline warned that the stolen information could be used for identity theft or fraud. As a preventive measure, WestJet is offering affected customers free identity theft protection and monitoring services for 24 months.

Timeline of Events

Suspicious activity was first detected on June 13, 2025, prompting a security review. WestJet determined that cybercriminals had gained temporary access to parts of its systems during that period. The company has not disclosed how many customers were impacted.

Regulatory Investigation

Canada’s Office of the Privacy Commissioner has launched a formal investigation into the breach. WestJet says it is cooperating fully with authorities and has enhanced its cybersecurity protocols to prevent future incidents.

Passenger Advisory

WestJet advises all affected customers to remain vigilant, monitor their accounts for unusual activity, and take advantage of the provided identity protection services.

© 2025 Mapple News Wire

The post WestJet Cyberattack Exposes Passenger Passport Data first appeared on Maple News Wire.

Ransomware Attack Shuts Down City Services

In February 2024, the City of Hamilton fell victim to one of the most significant municipal cyberattacks in Canadian history, with nearly 80 per cent of its systems crippled. The ransomware attack, launched on February 25, disrupted municipal operations for weeks. Cybercriminals demanded a staggering $18.5 million to unlock the city’s data, a sum officials refused to pay.

Insurance Denial Linked to Security Lapses

A recent city staff report revealed that Hamilton’s insurer denied $5 million in claims due to a lack of multi-factor authentication (MFA) across departments. MFA is a common cybersecurity measure requiring users to verify identity using two or more login credentials. Despite awareness of the requirement as early as 2022, the city had not implemented MFA system-wide by the time of the attack.

City Officials Admit Policy Non-Compliance

At a General Issues Committee meeting, officials acknowledged that the absence of MFA was cited as the “root cause” for the breach in the insurance policy. Solicitor Lisa Shields confirmed the city began a limited rollout in 2023 but had not reached full implementation before the attack. Acting CIO Cyrus Tehrani argued the breach could have occurred regardless, but the insurance company remained firm in its decision.

Financial and Operational Impact Grows

To date, Hamilton has spent $18.4 million on recovery efforts and is projected to spend $400,000 monthly through November 2026 to rebuild and secure its digital infrastructure. City Manager Marnie Cluckie emphasized the magnitude of the attack, calling it a defining crisis for the municipality. Police investigations remain active, and no ransom was paid.

Political Fallout and Calls for Accountability

City council members voiced frustration over the lack of accountability. Councillor Brad Clark criticized the absence of consequences for those responsible for the security oversight. “Absolutely none,” he said. Councillor Mike Spadafora echoed concerns, warning against making taxpayers shoulder the cost of leadership failures.

Leadership Shake-Up and Cultural Shift

Since the attack, Hamilton has undergone leadership changes. Janette Smith was replaced by Cluckie as city manager, and other senior staff have departed. Mayor Andrea Horwath said the city is undergoing necessary modernization and structural change. “This city needed to become more modernized. When I got here, I felt this was a city time forgot,” she told reporters.

Resistance to Cybersecurity Measures Highlighted

Cybersecurity firm CYPFER, hired post-attack, noted that resistance to MFA from within the city was a significant barrier. CEO Daniel Tobok described a public-sector mindset of “don’t fix it if it’s not broken.” His team reported initial pushback from staff, only shifting after the breach made the stakes painfully clear. “IT is not there to make their life miserable,” Tobok said. “It’s there to protect city assets.”

Future Preparedness in Focus

The city now pledges stronger digital safeguards and a full commitment to cybersecurity best practices. While recovery is ongoing, officials hope that Hamilton’s hard lesson will serve as a wake-up call for other Canadian municipalities lagging in digital risk mitigation.

For continuous coverage and real-time updates, keep following Maple News Wire.

The post Cyberattack Fallout: Hamilton Denied $5M Insurance Payout first appeared on Maple News Wire.

In a critical development, Microsoft has raised the alarm over cyberattacks targeting SharePoint server software, widely used by businesses and government agencies. These active attacks exploit a previously unknown vulnerability—known as a zero-day flaw—allowing unauthorized access through a spoofing technique. Microsoft and federal agencies are now urging organizations to apply security updates without delay.

What’s Happening with the SharePoint Attacks?

Microsoft issued an urgent security advisory on Saturday, cautioning that on-premise SharePoint servers used for internal collaboration face active exploitation. SharePoint Online, part of Microsoft 365 and hosted in the cloud, remains unaffected.

The software giant emphasized the severity of the threat, explaining that the flaw lets attackers perform spoofing over a network. That means a hacker can disguise their identity and appear as a trusted entity to gain access or manipulate systems.

Coordinated Global Response Underway

The FBI confirmed it is actively monitoring the situation and coordinating with both domestic and global cybersecurity partners. While the agency declined to share details, Microsoft confirmed it is working closely with the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Defense Cyber Command, and international defense bodies.

“We’ve been coordinating globally with key cybersecurity partners throughout our response,” said a Microsoft spokesperson. The company also confirmed that it has already rolled out critical patches to block the vulnerability and urged customers to install them immediately.

Who’s at Risk?

Only users of on-premise SharePoint Servers—particularly the 2016 and 2019 versions—are vulnerable. SharePoint Online users are not impacted. Organizations using older or unpatched versions of the software are most at risk of being compromised.

The Washington Post, which first reported the breach, cited unnamed sources claiming that tens of thousands of servers might be exposed. Affected sectors include U.S. and international government agencies, as well as large enterprises that rely on SharePoint for internal communications and file sharing.

What Is a Spoofing Attack?

In this case, spoofing refers to the practice of impersonating a legitimate user or domain on a network. Attackers can use this method to gain unauthorized access to systems or data, send deceptive messages, or execute fraudulent transactions. Spoofing attacks are especially dangerous in environments where trust between internal systems is critical.

Microsoft warns that this specific vulnerability enables attackers to exploit trust mechanisms across the network—posing serious risks to financial systems, sensitive data, and critical infrastructure.

Microsoft’s Recommendations

To minimize risk, Microsoft has provided detailed instructions for mitigation. If customers cannot immediately apply the security patches, Microsoft advises disconnecting the affected servers from the internet until updates are available.

Additionally, organizations should:

• Enable malware protection tools.

• Monitor server logs for unusual access patterns.

• Implement strict access controls and network segmentation.

• Regularly review and patch all known vulnerabilities.

Why This Matters Now

Zero-day exploits are among the most dangerous cybersecurity threats because they are unknown and unpatched when first discovered. This attack emphasizes the increasing sophistication of threat actors and the urgent need for proactive cybersecurity measures.

With more agencies and enterprises relying on hybrid server systems, these attacks highlight a growing gap between cloud security and on-premise vulnerabilities. Organizations that fail to update their systems remain exposed to both data breaches and operational disruptions.

Stay informed. Stay secure. Stay tuned to Maple Wire for real-time cybersecurity alerts and tech insights.

The post Microsoft Warns of SharePoint Cyberattack Risk first appeared on Maple News Wire.