On March 11, a suspected Iran-linked cyber attack disrupted global systems at Stryker Corp., a leading medical devices company based in Portage.
“We believe the incident is contained, and we are prioritizing restoration of systems that directly support customers, ordering and shipping,” the company said on Monday.
“Our internal teams, in partnership with third-party experts, reacted quickly to not only regain access but to remove the unauthorized party from our environment,” Stryker said.
Staff and contractors reported the logo of an “Iran-linked hacking group” showed up on company devices, the Wall Street Journal said.
Early in the investigation, Stryker said it believed there was no indication of ransomware or malware.
The company worked with Palo Alto Networks Unit 42 and other experts to investigate.
The threat actor used a malicious file to run commands, allowing them to hide their activity while in the company’s systems, Stryker said.
“To be clear, this file was not capable of spreading — either inside or outside of our environment," Stryker said this week.
The investigation has not identified malicious activity directed toward customers, suppliers, vendors or partners, the company said.
Based on input from Unit 42, Stryker said the incident is contained and that analysis has not identified any evidence of the threat actor accessing customer, supplier, vendor or partner systems as a result of this incident.
“We are working closely with our global manufacturing sites as operations continue to stabilize,” Stryker said. “Manufacturing capability is ramping quickly as critical lines and plants are brought back online, prioritizing patient needs. This is a 24/7 effort and the first priority of our entire organization.”
The hack disrupted the company’s systems across the world.
Employees were out of work for over a week after the cyber attack, according to a Stryker employee.
Stryker reported $25.1 billion in global sales for 2025, Crain’s reports.
© 2026 Advance Local Media LLC. Distributed by Tribune Content Agency, LLC.
