Stryker suffers cybersecurity attack disrupting global Microsoft environment operations

Stryker experienced a cybersecurity attack on March 11, 2026, that resulted in a global disruption. The company quickly activated its incident response plan and launched an investigation with the support of external advisors and cybersecurity experts. Stryker said it believes the incident has been contained and that it is now in the restoration process, which is progressing steadily. The company said the incident did not affect any of its products, connected or otherwise, and that all products across its global portfolio remain safe to use. The company identified that the threat actor used a malicious file to run commands which allowed them to hide their activity while in its systems. Stryker said this file was not capable of spreading either inside or outside of its environment and that its investigation has not identified any evidence of the threat actor accessing customer, supplier, vendor and partner systems. Stryker said it has been working closely with third-party cybersecurity experts, including Palo Alto Networks Unit 42, as well as government agencies such as the FBI and CISA. The company said patient care remains its highest priority as it continues restoration efforts. As of early April 2026, Stryker said it is fully operational across its global manufacturing network. Production is moving toward peak capacity with discipline and stability, supported by restored commercial, ordering and distribution systems, the company said.