Stryker (NYSE:SYK) said in an SEC filing that it has fully restored operations across its global systems following a March cyberattack.
On March 11, Stryker disclosed an attack that effectively wiped out data on its Microsoft-based IT system. Handala, an Iran-backed “hacktivist” group, took credit for the cyberattack. The attack forced Stryker to shut down locations around the world and disrupted order processing, manufacturing and shipping.
The attackers claimed on social media platform Telegram that its attack forced the Portage, Michigan–based orthopedic giant to shut down offices in 79 countries. They claimed their effort erased data from more than 200,000 systems, servers and mobile devices. The company launched an investigation and began restoration efforts, bringing its electronic ordering system back and restoring “most” manufacturing as of late March.
In an SEC Form-8K/A filed on April 9, 2026, Stryker said that, as of the date of the filing, it is fully operational across its global manufacturing network. Commercial ordering and distribution systems have also been restored.
Based on the information currently available, Stryker determined that the cyberattack had a material impact on its operations, with resulting impact to its financial results for the first quarter of 2026. However, the company believes the incident has not had, and is not reasonably likely to have, a material impact on its 2026 full-year guidance. For 2026, Stryker anticipates organic net sales growth of 8% to 9.5% and an adjusted EPS between $14.90 and $15.10.
Stryker’s investigation of the incident remains ongoing. It plans to release its first-quarter results on April 30, 2026.
