80K Stryker Devices Wiped Following Iran-Attributed Attack
Stryker produces medical devices. An Iran-attributed attack erased 80,000 corporate and personal devices (cell phones? laptops?) as a result of an intrusion into the Microsoft cloud and an instruction from that cloud to erase / reset the devices.
Andrew Ginter

https://www.bleepingcomputer.com/news/security/stryker-attack-wiped-tens-of-thousands-of-devices-no-malware-needed/
Stryker’s product shipping has stopped for now, but it is not clear yet whether manufacturing was also impaired. This is the kind of attack I’ve worried about for years – bad guys who get into IT or industrial cloud systems can wind up with the ability to affect thousands of devices via their encrypted cloud connections, in what might otherwise be heavily-defended sites.
Given the data available today, we will probably count this incident in next year’s OT Cyber Threat Report – we count incidents in the public record in manufacturing, heavy industry, critical industrial infrastructure and large building automation systems (eg: data centers). This year’s report is about to release – you can request your copy here.
About the author
Andrew Ginter
Share
Trending posts
Webinar: 2026 OT Cyber Threat Report
March 25, 2026
80K Stryker Devices Wiped Following Iran-Attributed Attack
March 24, 2026
Cyber-Informed Engineering Recognized with Cyber Policy Award for Research Impact
March 18, 2026
Stay up to date
Subscribe to our blog and receive
insights straight to your inbox
hbspt.forms.create({
region: “na1”,
portalId: “2249694”,
formId:”5671f865-277f-4b7f-b4fa-743d639d402a”,
onFormReady: function($form){
console.log(‘Form Ready’);
setUtm();
},
});
Tags
- industrial cyber attacks
- NERC CIP
- IEC 62443
- NIST
- OT security Standards
The post 80K Stryker Devices Wiped Following Iran-Attributed Attack appeared first on Waterfall Security Solutions.

