Six months later, Stryker's cyberattack still costs $45M a quarter

MedDevice Cyber Staff · 5 days ago · 2 min read · Via MassDevice

Six months after pro-Iran hackers took Stryker's manufacturing systems down, the company put a number on what the March attack is still costing it. CFO Preston Wells told investors at the Wells Fargo Healthcare Conference on September 10 that the intrusion will cut third quarter sales by 70 to 80 basis points, roughly $45 million, concentrated in the peripheral vascular business. Stryker held its full year guidance.

The damage sits in the unit Stryker built from its $4.9 billion acquisition of Inari Medical in 2025. Manufacturing there went down for several weeks after the attack and inventory has not caught up: Stryker is rationing supply to its largest accounts rather than chasing new business, and Wells pushed the recovery target from the third quarter to the fourth. "It's something that we're working to get rectified as soon as possible," he said.

Shares traded around $273 on September 11, down more than 10 percent for the week, as investors weighed the update alongside softer hip sales. It is the clearest public accounting yet of the March incident's tail: the outage itself ran weeks, but the peripheral vascular line remains short of inventory six months later.

Nothing in Wells' remarks pointed to ongoing compromise; the constraint by September is physical inventory and qualified manufacturing capacity, not systems access. That is the part of an attack a restored server does not fix, and it is why a recovery plan built around getting IT back online should budget separately for the production run rate lost underneath it.

Questions & Answers

How much will the March 2026 cyberattack cost Stryker in the third quarter?

CFO Preston Wells told the Wells Fargo Healthcare Conference on September 10, 2026 that the March attack will cut third quarter sales by 70 to 80 basis points, about $45 million, concentrated in the peripheral vascular business. Stryker kept its full year guidance.

Which Stryker business took the hardest hit from the attack?

The peripheral vascular unit built from Stryker's $4.9 billion acquisition of Inari Medical in 2025. Manufacturing was down for several weeks after the March attack and inventory has not recovered, so Stryker is rationing supply to its largest accounts and pushed its recovery target from the third quarter to the fourth.

Is the March cyberattack still an active security incident?

There is no indication of that in Wells' remarks. The financial impact disclosed in September is a lagging effect of inventory and manufacturing disruption from the March intrusion, not a sign of ongoing compromise. What remains unresolved is physical supply, not systems access.

← Back to Threat Intel