INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Iran-Linked Handala Hackers Claim Major Hacks on Stryker and Verifone

| 2026-03-11 23:05 CRITICAL MEDIUM DATA BREACH STATE-SPONSORED & ESPIONAGE
JSON
Executive Summary
AI-generated
On March 11, 2026, an Iran-linked hacking group known as Handala Hack Team claimed responsibility for cyberattacks against Stryker Corporation and Verifone. The targeted sectors include medical technology manufacturing (Stryker) and payment technology (Verifone). According to the hackers' claims, more than 200,000 systems, servers, and mobile devices were affected at Stryker, with 50 terabytes of data extracted, while operations across 79 countries were allegedly forced to shut down. The attack on Verifone involved breaching internal systems and extracting financial and transaction-related data, disrupting payment systems and point-of-sale terminals. However, both companies have not confirmed the full extent of the claims made by Handala Hack Team, with Stryker confirming a cyber incident but no evidence supporting the group's assertions, while Verifone has stated it found no evidence to support their breach claim.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

Sign In to View 1 IoCs Create Free Account
ha•••••.com
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth manufacturingmanufacturing
Incident Timeline
‎2026/03/11
Iran-Linked Handala Hackers claimed responsibility for wiping over 200,000 systems and extracting 50 terabytes of data from Stryker's servers.
infrastructure Windows
The images include: IIS configuration consoles Device management dashboards Windows server administration panels Pages labeled RAU Management System Internal data tables referencing terminals and system activity Handala’s post on…
data_breach 50 terabytes
…im large-scale impact at Stryker In posts published on its official website, Handala claimed responsibility for the attack and claimed that it had wiped more than 200,000 systems, servers, and mobile devices while extracting 50 terabytes of data.
Tactical Metrics
Metrics
infrastructure
​Windows
Affected Product
The images include: IIS configuration consoles Device management dashboards Windows server administration panels Pages labeled RAU Management System Internal data tables referencing terminals and system activity Handala’s post on…
Metrics
data_breach
50
Terabytes
…im large-scale impact at Stryker In posts published on its official website, Handala claimed responsibility for the attack and claimed that it had wiped more than 200,000 systems, servers, and mobile devices while extracting 50 terabytes of data.
Intelligence Sources
HackRead 2026-03-11