Cyber incident disrupts Stryker (NYSE: SYK) operations and systems
Rhea-AI Filing Summary
Stryker Corporation reports an ongoing cybersecurity incident that disrupted its global Microsoft environment and is affecting order processing, manufacturing and shipping. The company currently believes its patient-related services have not been disrupted and its connected products were not impacted.
An internal investigation continues, and the full scope, nature and operational or financial impacts are not yet known. Stryker also highlights potential risks including data integrity issues, regulatory scrutiny, litigation, reputational damage and adverse effects on revenue, operating income, cash flows and liquidity.
Positive
- None.
Negative
- Cybersecurity incident disrupting core operations: Stryker reports global disruption to its Microsoft environment, affecting order processing, manufacturing and shipping, while the full scope and duration of the disruption remain unclear.
- Material but unquantified financial and reputational risk: The company warns of potential adverse impacts on revenue, operating income, cash flows, liquidity, regulatory scrutiny, litigation exposure and customer and supplier relationships.
Insights
Cyber incident is disrupting Stryker’s operations with unknown financial impact.
Stryker has experienced a cybersecurity incident that disrupted its global Microsoft environment, affecting order processing, manufacturing and shipping. The company believes patient-related services and connected products are not impacted, which helps limit immediate risk to care delivery.
The investigation is ongoing, and the company states that the full scope, nature and impacts, including financial effects, are not yet known. Disclosed risk factors include possible data integrity issues, unauthorized data release, operational delays, regulatory scrutiny and litigation tied to the incident.
Potential adverse consequences named by Stryker span revenue, operating income, cash flows from operations, liquidity and relationships with customers, suppliers and other third parties. Actual outcomes will depend on how quickly systems are restored and what the investigation ultimately uncovers.
UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
WASHINGTON, D.C. 20549
FORM
CURRENT REPORT
Pursuant to Section 13 or 15(d)
of the Securities Exchange Act of 1934
Date of Report (Date of earliest event reported):
(Exact name of Registrant as Specified in Its Charter)
| (State or Other Jurisdiction of Incorporation) |
(Commission File Number) |
(IRS Employer Identification No.) | ||
| (Address of Principal Executive Offices) | (Zip Code) | |||
Registrant’s Telephone Number, Including Area Code:
(Former Name or Former Address, if Changed Since Last Report)
Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions:
| Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425) |
| Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12) |
| Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b)) |
| Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c)) |
Securities registered pursuant to Section 12(b) of the Act:
| Title of each class |
Trading |
Name of each exchange on which registered | ||
Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§ 230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§ 240.12b-2 of this chapter).
Emerging growth company
If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐
| Item 7.01 | Regulation FD Disclosure. |
As previously reported on March 11, 2026, Stryker Corporation (“we” or the “Company”) identified a cybersecurity incident affecting certain information technology systems of the Company that resulted in a global disruption to the Company’s Microsoft environment. On March 12, 2026, Dave Nathans, the Company’s Chief Information Security Officer, provided an update to certain of the Company’s customers and other members of the cybersecurity community regarding the ongoing cybersecurity incident.
At the meeting, the Company noted that its operations continue to be disrupted, including its order processing, manufacturing and shipping. In addition, the Company does not believe that its patient-related services have been disrupted or that its connected products were impacted by the incident.
The Company’s investigation of the cybersecurity incident is ongoing, and the full scope, nature and impacts, including operational and financial impacts, of the incident are not yet known.
The information contained in this Current Report on Form 8-K is being furnished and shall not be deemed to be “filed” for purposes of Section 18 of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), or otherwise subject to the liabilities of that section, or incorporated by reference into any filing under the Securities Act of 1933, as amended, or the Exchange Act, except as shall be expressly set forth by specific reference in such filing.
Caution Concerning Forward-Looking Statements
This Form 8-K contains forward-looking statements subject to the safe harbor protection provided by Section 27A of the Securities Act of 1933, Section 21E of the Securities Exchange Act of 1934, and the Private Securities Litigation Reform Act of 1995. All statements other than statements of historical fact are forward-looking statements, including statements regarding the Company’s current beliefs regarding the extent of the cybersecurity incident and the results or findings of the Company’s investigation thereof; the Company’s ability to contain and/or mitigate the incident; the disruption to our business or operations; and the potential impact on the Company’s reputation, financial condition and results of operations. These forward-looking statements involve known and unknown risks, uncertainties and other important factors that may cause actual results to differ materially from expectations as of the date of this filing. Factors that could cause actual results to differ materially from those indicated in the forward-looking statements include, but are not limited to, any impairment of the integrity of the Company’s systems or data; delays or difficulties in restoring the Company’s systems and data; the Company’s continued ability to use alternatives to its systems, to the extent needed; the Company’s ability to process information it collected while using alternatives to its systems and the integrity of that information; the adequacy of processes during the period of disruption of the Company’s systems; the results of the Company’s analysis of the scope and details of the cybersecurity incident; the unauthorized release of any of the Company’s data, including third party data held by the Company, or the use of any such data for any fraudulent purposes; potential adverse impact of the incident on the Company’s results of operations, including revenue, operating income and cash flows from operations, and on its financial condition, including liquidity; diversion of management’s attention from operations of the Company to addressing the cybersecurity incident; potential litigation related to the cybersecurity incident; potential adverse effects on relationships with customers, suppliers and other third parties as a result of the cybersecurity incident; reputational risk related to the cybersecurity incident; regulatory scrutiny of the cybersecurity incident; and other risks listed or described from time to time in our filings with the U.S. Securities and Exchange Commission, including our Annual Report on Form 10-K and Quarterly Reports on Form 10-Q that we have filed or will file hereafter. We disclaim any intention or obligation to publicly update or revise any forward-looking statement to reflect any change in our expectations or in events, conditions or circumstances on which those expectations may be based, or that affect the likelihood that actual results will differ from those contained in the forward-looking statements.
SIGNATURE
Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.
| STRYKER CORPORATION | ||||||
| (Registrant) | ||||||
| Dated: March 12, 2026 | By: | /s/ Tina S. French | ||||
| Name: | Tina S. French | |||||
| Title: | Corporate Secretary | |||||
FAQ
What cybersecurity incident did Stryker (SYK) report in its 8-K?
How are Stryker’s operations being affected by the cybersecurity incident?
Did Stryker say patient-related services were impacted by the cyberattack?
Does Stryker know the financial impact of the cybersecurity incident yet?
What risks and potential consequences does Stryker highlight from the cybersecurity event?
Is Stryker obligated to update its forward-looking statements about the incident?
Filing Exhibits & Attachments
4 documents