The healthcare and medical technology industries have faced a growing wave of sophisticated cyberattacks this year, highlighting a shift in the nature of cyber threats. These attacks are no longer limited to data theft or ransom demands. Instead, they increasingly target critical business operations, disrupt supply chains, and interfere with the manufacturing and distribution of medical products.
One of the most prominent examples was the March 11 cyberattack on U.S.-based medical technology company Stryker, claimed by the hacking group Handala. By exploiting the device-wiping functionality of Microsoft Intune, the attackers erased data from more than 200,000 electronic devices, causing widespread disruption to the company’s operations, including order processing, shipping, and manufacturing. Despite the significant damage, Stryker stated that its medical products and connected devices were not affected and confirmed that its operations had been fully restored by April 1.
Stryker was not the only healthcare company targeted by cybercriminals. Major industry players, including Intuitive Surgical, Medtronic, West Pharmaceutical, Novo Nordisk, iRhythm Technologies, Cook Medical, Abbott Laboratories, and Boston Scientific, also experienced various cyber incidents in the following months. These attacks involved phishing, data theft, ransomware, and social engineering.
Although many of these companies reported no impact on patient safety, medical device functionality, or manufacturing operations, several incidents resulted in the exposure of millions of patients’ and employees’ records, disruptions to business operations, and temporary interruptions to manufacturing and product distribution.
The most significant takeaway from these incidents is the changing strategy of cybercriminals. Rather than focusing exclusively on stealing information and demanding ransom payments, attackers are increasingly targeting corporate IT infrastructure, management systems, and supply chains to disrupt essential business operations.
Under these circumstances, even without physically damaging medical equipment or directly harming patients, shutting down a medical company’s operations can have substantial economic and operational consequences. Such disruptions may also indirectly affect healthcare services and patients’ access to essential medical products.
The broader message is clear: Cyberattacks against the healthcare industry have entered a new phase. The objective is no longer simply to gain access to sensitive information, but increasingly to disable businesses and disrupt critical healthcare infrastructure. As a result, cybersecurity is no longer just an information technology concern; it has become an essential component of business continuity and patient safety.
source: MPO
