{"id":360800,"date":"2026-03-23T11:31:07","date_gmt":"2026-03-23T11:31:07","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/360800\/"},"modified":"2026-03-23T11:31:07","modified_gmt":"2026-03-23T11:31:07","slug":"hacker-group-behind-stryker-attack-forced-to-reorganise-after-key-figures-killed-in-military-action","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/360800\/","title":{"rendered":"Hacker group behind Stryker attack forced to ‘reorganise’ after key figures killed in military action"},"content":{"rendered":"

Irish intelligence officials believe the Iranian-backed hacker group behind the cyberattack on global med tech company Stryker<\/a>, which has more than 5,000 employees in Ireland, is having to \u201creorganise\u201d after two of its key figures were killed in US and Israeli military action.<\/p>\n

Officials suspect that the Handala Hack group, and other hackers controlled by the Iranian clerical regime, will persist in cyberattacks across the world, including US corporations who have bases in Ireland.<\/p>\n

Stryker, which has more than 56,000 employees worldwide, was hit by the group on March 11.<\/a>\n <\/p>\n

It is thought that no similar incidents have been reported since to authorities in Ireland, although there are some indications of cyber \u201cscanning\u201d going on.<\/p>\n

Intelligence officials believe it is likely that further incidents, including the targeting of US multinationals, will happen. Officials believe that such incidents could affect Ireland.<\/p>\n

Outside of the US, Stryker has its largest manufacturing and research facility in Cork\u00a0\u2014 where it employs over 4,000 people. An additional 1,400 people are based in plants in Limerick and Belfast.<\/p>\n

The Handala attack disabled all remote devices connected to Stryker IT systems, affecting all employees and customer digital ordering systems.<\/p>\n

Mobile device management targeted<\/p>\n

Production at the Cork plants was also brought to a halt or at least partially.\u00a0<\/p>\n

As of last Friday, some employees told the Irish Examiner that production was still down.<\/p>\n

While it was initially believed that Stryker suffered a \u201cwiper\u201d attack \u2014 in which the computer network is disabled or wiped out \u2014 cyber intelligence sources said this was not the case.<\/p>\n

Sources said the network itself was not affected, adding that the damage was mainly confined to Stryker\u2019s mobile device management system.<\/p>\n

These sources said the attack focused on its Microsoft “Intune instance”, which is a cloud-based system for managing connections between remote personal devices and the network. These systems are widely used by companies to enable remote access to the IT system.\u00a0<\/p>\n

It is suspected that the group managed to obtain or steal credentials of someone with admin access to the management system, removing all devices connected to the network.<\/p>\n

‘Incident has been contained’<\/p>\n

The most recent statement from Stryker said its teams have \u201ccontinued to work around the clock\u201d with external partners to make \u201csignificant progress\u201d on restoring systems.<\/p>\n

\u201cWe believe the incident has been contained, and we are prioritising restoration of systems that directly support customers, ordering, and shipping,\u201d it said in a statement.<\/p>\n

It said the attack was \u201ccontained to Stryker\u2019s internal Microsoft environment\u201d, adding that the incident \u201cdid not affect\u201d the security or safety of its products or devices.<\/p>\n

It said teams are working \u201cas quickly and safely as possible\u201d to reconcile orders, manufacture products, and deliver to customers.<\/p>\n

Irish intelligence agencies believe that more multinational US corporations, including those with bases in Ireland, will be targeted by Iranian-backed hacker groups.<\/p>\n

It is also possible these groups might broaden their potential targets, as they have done in attacks on neighbouring Middle Eastern countries that have US military bases.<\/p>\n

Cyberattacks by Iranian groups have stepped up in response to the Israeli and US bombing of Iranian military and intelligence sites, including in urban areas with large civilian populations.<\/p>\n

In its claim of responsibility, Handala specifically mentioned the bombing of a school in the south of Iran. The bombing claimed the lives of 175 civilians\u00a0\u2014 most of them children.<\/p>\n

The US has been blamed for the attack, and a preliminary US military investigation has reportedly determined this to be correct.<\/p>\n

Cormac O’Keeffe is the Security Correspondent with the Irish Examiner.<\/p>\n","protected":false},"excerpt":{"rendered":"Irish intelligence officials believe the Iranian-backed hacker group behind the cyberattack on global med tech company Stryker, which…\n","protected":false},"author":2,"featured_media":360801,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[72,79,61,11829,60,1196],"class_list":["post-360800","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-cork-news","tag-ie","tag-iran","tag-ireland","tag-middle-east"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/360800","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=360800"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/360800\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/360801"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=360800"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=360800"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=360800"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}