The Digester

Handala Linked to Iran Behind Disruptive Stryker Cyberattack

Mar 13th 2026

An Iran-linked hacker group calling itself Handala claimed a crippling breach of US medical device firm Stryker, signaling a major escalation in Tehran-linked cyber retaliation that blends hacktivist messaging with destructive state-aligned tools.

  • Handala claimed a destructive breach of medical firm Stryker that reportedly disabled tens of thousands of computers and disrupted global operations.
  • Multiple security firms say Handala is likely a front for Iran’s Ministry of Intelligence and part of a broader state-linked cluster tracked as Void Manticore.
  • The group combines pro-Palestinian hacktivist branding with state-style tactics, using wiper malware and hack-and-leak operations against Israeli and Western targets.
  • Researchers describe recent activity as opportunistic and noisy, exploiting available footholds amid US and Israeli strikes rather than following a long-term strategic plan.
  • Handala has publicly broadcast claims via websites and social channels, used Starlink to bypass Iranian blackouts, and previously targeted Israeli businesses, Balkan agencies and civilian internet cameras.

Articles