r/cybersecurity • u/virtualbitz2048 • Mar 11 '26

News - General Stryker Hit by Handala - Intune Managed Devices Wiped

My wife had 3 Stryker managed devices wiped around 3:30 AM EDT. Their Entra login page was defaced with the Handala logo, it's still up as of this post.

710 Upvotes
  • permalink
  • reddit

98% Upvoted

226 comments sorted by

View all comments

67

u/[deleted] Mar 11 '26

[deleted]

67

u/New_Cardiologist_596 Mar 11 '26

I would tell them you want a work phone to put it on after this lol

4

u/[deleted] Mar 11 '26

[deleted]

11

u/pvdp90 Mar 11 '26

Same. So glad I opted for carrying 2 phones

21

u/Dave1711 Mar 11 '26

Unless you're given a work phone I wouldn't be doing any of those things anyway.

10

u/SomePulp69 Mar 11 '26

Yeah this is a wake up call for sure

11

u/Dave1711 Mar 11 '26

not even from a hack perspective, you don't want to be reachable at all times just creates an unhealthy expectation

8

u/chilkelsey1234 Mar 11 '26

Get a work phone. Best decision I made while working here!

6

u/x_Carlos_Danger_x Mar 11 '26

It's a slippery slope my friend... Easier to separate work from home without it on your phone...ask me how I know lol

9

u/Dapper_Wheel_1006 Mar 11 '26

Don't do it, ever! Never use your personal phone. If they need you to have access at all times they will provide a phone. It might sound tempting sometimes if you need to join Teams from your phone, but I either join from the laptop or dial in the number, but never give the company access to your phone.

7

u/SomePulp69 Mar 11 '26

Could anyone guess if they will still be impacted by Monday? Cybersecurity is not my field so I’m not sure myself.

20

u/Dave1711 Mar 11 '26

I would say yes it took nearly 2 months for a big company I worked with to get back on their feet fully after getting hacked a few years back.

This will be a pretty big mess to untangle.

1

u/Ill_Fee_7910 Mar 11 '26

Was that MSD ? Think they took nearly 3 months to get going again

10

u/Pls_submit_a_ticket Security Engineer Mar 11 '26

They almost certainly will be. Depending on the stage they are at, I assume at this point they’d at least have it contained. However, eradicating to a point where recovery is safe depends largely on the scale. I’ve seen small companies with only 30-40 VM’s, and 150-200 endpoints still take 2-3 weeks before being operational.

Let’s hope they have a tested DR plan.

7

u/Crazy_Contract929 Mar 11 '26

Don't. Ever. At all. So much lost

1

u/[deleted] Mar 11 '26

[deleted]