Stryker says it is restoring operations after pro-Iranian thieves took away the weapons of thousands of workers

Healthcare technology giant Stryker said it is in the process of overhauling its computers and internal network following the alleged cyberattack allowed pro-Iranian sabotage wiping away tens of thousands of workers’ equipment.

The hack, which led to a growing disruption to the company’s operations, is believed to be the first in the United States in response to Trump’s war on Iran.

Stryker said in change over the weekend that the March 11 cyberattack was inside Microsoft’s company, and that its Internet-connected medical products are “safe to use.”

While the cause of the breach is still under investigation, the medical device maker said it has not seen any indication of ransomware or malware. Stryker said its ability to process orders, manufacture, or ship equipment continues to be disrupted.

An Iranian official group called Handala he boasted of the devastating breachsaying that his hack was a response US airstrike on Iranian school which killed at least 175 people, mostly children. The hackers also defaced the company’s login pages and logo.

According to Computer RestHandala hackers may have hacked using an internal account Stryker provided them with. unlimited opportunities to the company’s Windows network. The hackers reportedly accessed the company’s Microsoft Intune dashboards, which allow remote monitoring of employee laptops and mobile devices, such as wiping data if an employee’s device is lost or stolen.

The effectiveness of the company’s Intune dashboards would allow hackers to wipe employees’ phones and laptops, including their devices, without using malware.

The Wall Street Journal It also said that hackers target Intune.

A Stryker spokesperson did not respond to requests for comment or questions about the breach, including whether the account that was allegedly compromised was protected by multi-factor authentication.

It’s unclear how the hackers gained access to Stryker’s network in the first place. Security researchers are Palo Alto Networks said Handala hackers may have relied on phishing to compromise Stryker’s network. IBM said the hacking group linked to Iran is known for using fraudulent tactics and malicious threats, including targeting the health and energy sectors. Infostealer malwarethat can steal a person’s passwords and documents, can also be a crime.

Stryker has 56,000 employees worldwide and operates in more than 60 countries, according to Reuters.