Stryker hackers allegedly wiped tens of thousands of devices without using
any malware

Date:
Tue, 17 Mar 2026 14:00:00 +0000

Description:
They used a legitimate Microsoft service and a set of compromised credentials.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Get the TechRadar Newsletter Sign up for
breaking news, reviews, opinion, top tech deals, and more. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are
now subscribed Your newsletter sign-up was successful An account already exists for this email address, please log in. Subscribe to our newsletter Handala hackers hit Stryker via compromised Intune admin Tens of thousands of devices wiped, but no data theft confirmed Medical products remain safe;
order systems offline and manual only When cybercriminals struck Stryker last week and wiped tens of thousands of electronic devices, they did so without using any malware. Instead, they used Intune, Microsoft s cloud-based
endpoint management service, sources are saying.

Last week, a hacking collective calling itself Handala (AKA HAtef, Hamsa)
said they broke into Stryker, a Fortune 500 healthcare company with tens of billions in annual sales. They claimed to have stolen 50 terabytes of data
and wiped tens of thousands of systems and servers across the companys network. "In this operation, over 200,000 systems, servers, and mobile
devices have been wiped, and 50 terabytes of critical data have been extracted," the attackers allegedly said at the time. "Strykers offices in 79 countries have been forced to shut down." Article continues below You may
like 'An unprecedented blow': US medtech giant Stryker suffers global outage after apparent Iranian cyberattack SmarterTools network breached using auth-bypass attack against single unpatched virtual machine Chinese hackers hide malware within Windows and Google Drive to hit government targets
Abusing Intune Stryker soon confirmed the reports with an 8-K filing.
Multiple employees also confirmed their electronic devices were wiped overnight.

Then, a source familiar with the attack told BleepingComputer that Handala managed to compromise an Intune admin account and used it to create a new Global Administrator account. With the master account, they initiated the
wipe command, erasing data from almost 80,000 devices in a matter of hours. The investigators have also disputed Handalas claims of data exfiltration, saying they found no evidence that any data was removed whatsoever.

In a subsequent update, Stryker said its medical devices are safe to use, but electronic order systems are offline, meaning customers can only place orders manually, through sales representatives.

All Stryker products across our global portfolio, including connected, digital, and life-saving technologies, remain safe to use, the company said. This event was contained to Strykers internal Microsoft environment, and as a result it did not affect any of our productsconnected or otherwise. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Although unconfirmed, reports are saying Handala are hacktivists linked to Irans Ministry of Intelligence and Security, targeting mostly Israeli organizations around the world.

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/stryker-hackers-allegedly-wiped-tens-of -thousands-of-devices-without-using-any-malware


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)