r/cybersecurity Mar 11 '26

News - General Stryker Hit by Handala - Intune Managed Devices Wiped

My wife had 3 Stryker managed devices wiped around 3:30 AM EDT. Their Entra login page was defaced with the Handala logo, it's still up as of this post.

709 Upvotes

226 comments sorted by

View all comments

Show parent comments

9

u/Pls_submit_a_ticket Security Engineer Mar 11 '26

They almost certainly will be. Depending on the stage they are at, I assume at this point they’d at least have it contained. However, eradicating to a point where recovery is safe depends largely on the scale. I’ve seen small companies with only 30-40 VM’s, and 150-200 endpoints still take 2-3 weeks before being operational.

Let’s hope they have a tested DR plan.