Stryker Cyber Attack: Irish Operations Crippled, 4,000 Cork Employees Affected

A sophisticated cyber attack has brought operations to a standstill at Stryker, a major US medical technology company, impacting thousands of employees in Ireland and globally. All IT systems at Stryker’s Cork base, which employs 4,000 people, remain offline as of Wednesday afternoon, March 11, 2026, according to reports from the Irish Mirror and Irish Examiner. The disruption extends to the company’s operations in Europe, Asia, and the United States.

Wiper Attack and Potential Iranian Link

The attack is characterized as a “wiper” attack, meaning the data on targeted IT systems has been irrevocably erased, as reported by the Irish Examiner. This type of attack differs from ransomware, where data is encrypted and held for ransom; a wiper attack appears to be motivated by a political agenda. Sources suggest the most likely culprit is Handala, a pro-Palestinian hacker group believed to be backed by Iran. Handala has previously targeted companies based in Israel. The National Cyber Security Centre in Dublin has been notified and is responding to the incident.

Impact on Stryker’s Operations and Workforce

The immediate impact is a complete halt to work for many Stryker employees. The Irish Mirror reported that most work devices, including personal phones with Stryker work profiles, have been wiped clean. Stryker communicated to its Cork-based staff that it is experiencing a “severe, global disruption impacting all Stryker laptops and systems that connect to our network.” A separate message to colleagues in Asia stated the root cause remains unidentified, but the company is working with Microsoft to address the issue as a “critical, enterprise-wide incident.”

Stryker operates in 61 countries and employs over 56,000 people worldwide. The Cork facility is the company’s largest location outside of the United States, making the disruption particularly significant. A source quoted in the Irish Mirror stated, “Nobody can work. The entire company has been brought to a standstill. Nobody has any idea what is going on. This is going to have a huge knock-on effect.”

Financial Implications and Manufacturing Disruption

The shutdown is expected to have a substantial financial impact on Stryker. The Irish Examiner notes that the attack effectively disables the technology used to manufacture Stryker’s medical products and devices. Restoring production to unaffected machines will be a key priority. While specific financial figures related to the disruption haven’t been released, the scale of the outage – impacting global operations and a workforce of over 56,000 – suggests potentially significant losses.

Handala Hack and Geopolitical Context

The alleged involvement of Handala Hack adds a layer of geopolitical complexity to the situation. The group is linked to the Iranian regime, which is currently engaged in broader military and economic conflicts. The Irish Examiner reports that Handala Hack has as well claimed responsibility for breaching the website of the Academy of the Hebrew Language, indicating a pattern of targeting entities associated with Israel. This suggests the attack on Stryker may be part of a larger, politically motivated campaign.

What’s Next: Recovery and Investigation

Stryker is actively working with Microsoft to identify the root cause of the attack and restore its systems. The company has not provided a timeline for full recovery. The Irish Mirror reported that Gardai (Irish police) and Stryker have been contacted for comment, suggesting a formal investigation is underway. The focus will be on restoring systems and assessing the full extent of the data loss. Given the nature of a “wiper” attack, complete data recovery is unlikely, meaning Stryker will likely face significant costs associated with rebuilding systems and restoring critical data from backups – if available. Further updates will likely be provided as the investigation progresses and the company gains a clearer understanding of the attack’s scope and impact.

The incident underscores the growing threat of cyberattacks targeting critical infrastructure and businesses, particularly those with a global footprint. The potential for politically motivated attacks, as suggested by the alleged involvement of Handala Hack, adds another dimension to the risk landscape.

Additional reporting from CorkBeo confirms the impact on Stryker’s manufacturing facilities in East Cork.