Stryker

SHERIDAN, WYOMING – April 12, 2026 – Hospitals, government agencies, and corporations doing business in or around Iran's sphere of geopolitical conflict now face a demonstrably more aggressive threat landscape, as the hacker group known as "Handala" has become the operational face of Iran's retaliatory state-sponsored cyberattacks — most recently implicated in a paralyzing breach of medical technology firm Stryker.

Who Handala is and how it operates

Handala has positioned itself publicly as a hacktivist collective, using the language and aesthetics of political resistance to obscure what researchers and investigators describe as coordinated, state-backed cyber operations. The group leverages "hacktivism" as cover — framing destructive intrusions as acts of protest while executing the kind of sustained, resource-intensive campaigns typically associated with nation-state actors.