In March 2026, following the outbreak of war with Iran, a major cyberattack targeted the American medical technology company Stryker, disrupting its global network
⏳ Intelligence Brief Pending
A full intelligence brief for this hotspot is being prepared. Below is the raw signal data collected by our monitoring pipeline.
Summary
In March 2026, following the outbreak of war with Iran, a major cyberattack targeted the American medical technology company Stryker, disrupting its global network. The attack, attributed to the Iran-linked hacking group Handala, exploited Microsoft's Intune cloud management platform to remotely wipe over 200,000 devices across 79 countries. While Handala presents itself as a hacktivist group, it is reportedly connected to Iranian intelligence services. The incident is described as the largest cyberattack Iran has conducted during wartime. Experts are now warning of further cyberattacks in the conflict's aftermath, noting that state-linked and hacktivist groups have claimed a series of cyber operations against the United States and Israel since the war began.
★ Why It Matters
This event highlights the escalation of cyber warfare as a key component of modern international conflict, demonstrating how state actors can use proxy groups to conduct disruptive attacks on critical global infrastructure, potentially causing widespread operational and economic damage beyond the traditional battlefield.