Iran-Linked Hackers Carry Out ‘Significant’ Cyberattack

A cyberattack linked to Iran has struck a major American medical technology company, marking what some experts believe could be the most consequential wartime cyber operation ever directed at the United States. According to reporting from the Wall Street Journal, the attack targeted Stryker, a Michigan-based manufacturer known for producing medical implants and surgical robotics systems.

The group claiming responsibility calls itself Handala. U.S. and Israeli cybersecurity specialists say the organization is believed to operate on behalf of Iran’s Ministry of Intelligence. The hackers said the intrusion was carried out in retaliation for a deadly strike on an Iranian school that is currently under investigation by the United States.

Following the breach, Stryker instructed its roughly 56,000 employees to disconnect their devices from company networks. The attackers had penetrated internal Microsoft systems, resulting in data being erased from Windows laptops and mobile phones. Some internal ordering systems were also taken offline as the company worked to contain the damage.

Stryker said that its connected medical devices remain safe and operational, and hospitals using its equipment should not experience safety issues. The company added that interruptions affecting certain hospital data transmissions have been limited, with some disruptions caused by precautionary shutdowns while the incident is addressed.

Cybersecurity analysts say the incident reflects a growing pattern in which Iran is combining digital attacks with ongoing geopolitical tensions involving U.S. and Israeli forces. Handala publicly described the cyber operation as an act of retaliation connected to the school strike.

Experts note that Iranian cyber tactics are often relatively simple compared with the most advanced hacking techniques. Many operations rely on methods such as phishing rather than sophisticated software exploits. Even so, analysts warn that the real concern is Iran’s increasing readiness to create widespread disruption.

Because cyber operations require minimal resources, the barrier to launching damaging attacks is relatively low. As one cybersecurity expert told CNN, a single laptop and an internet connection can be enough to reach across borders and cause significant disruption.

Iran has previously been linked to destructive cyber campaigns. One notable example occurred in 2012 when hackers carried out a data-wiping attack on Saudi Arabia’s national oil company, disabling large portions of its computer network. Security specialists say the latest breach shows that private corporations—not just government agencies or critical infrastructure—must now prepare for the possibility of major cyberattacks during international conflicts

Original Source