The medical technology and healthcare industries have faced a growing wave of widespread and sophisticated cyberattacks this year. These incidents highlight how cyber threats are no longer limited to data theft or ransom demands. Instead, attackers are increasingly targeting critical business operations, disrupting supply chains, and interfering with the manufacturing and distribution of medical products.
One of the most prominent examples was the March 11 cyberattack on U.S.-based medical technology company Stryker, claimed by the hacking group Handala. By exploiting the device-wiping functionality of Microsoft Intune, the attackers erased data from more than 200,000 electronic devices, causing widespread disruption to the company’s operations, including order processing, shipping, and manufacturing. Despite the significant damage, Stryker stated that its medical products and connected devices were not affected and that the company had fully restored its operations by April 1.
This was not the only cyber threat facing the healthcare industry. Major companies, including Intuitive Surgical, Medtronic, West Pharmaceutical, Novo Nordisk, iRhythm Technologies, Cook Medical, Abbott Laboratories, and Boston Scientific, were also targeted in subsequent months by various cyberattacks, including phishing, data theft, ransomware, and social engineering.
Although many of these companies reported that the attacks had no impact on patient safety, medical device functionality, or manufacturing and distribution processes, some incidents resulted in the exposure of millions of patients’ and employees’ records, disruptions to business operations, and temporary suspensions of manufacturing and product shipments.
The key takeaway from these developments is a shift in cybercriminal strategies. Rather than focusing solely on data theft and financial extortion, attackers are increasingly targeting technology infrastructure, corporate management systems, and supply chains to disrupt critical business operations across the healthcare sector.
Under these circumstances, even without physically damaging medical equipment or directly harming patients, shutting down a medical company’s operations can have significant economic and operational consequences. Such disruptions may also indirectly affect healthcare services and patients’ access to essential medical products.
The broader message is clear: Cyberattacks against the healthcare industry have entered a new phase, in which attackers are no longer focused solely on accessing information but are increasingly seeking to disable businesses and disrupt critical healthcare infrastructure. As a result, cybersecurity is no longer merely an information technology concern; it has become an essential component of business continuity and patient safety.
source: MPO
