Stryker updates cyber incident: contained, no customer data accessed per Unit 42

STRYKER CORP

• Threat actor used malicious file to hide activity; file not capable of spreading internally or externally.
• Investigation has not identified malicious activity directed at customers, suppliers, or partners.
• Unit 42 letter confirms no persistent unauthorized access as of March 20, 2026; all IOCs addressed.
• Impacted systems being rebuilt or restored; manufacturing ramping as lines come back online.
• Company has not yet determined whether incident is reasonably likely to have a material impact.