Stryker updates hospitals on platforms unaffected by cyberattack: 12 updates

Stryker said several surgical technology platforms remain unaffected as the company continues responding to a cyberattack that disrupted its Microsoft-based internal environment beginning March 11.

Here are 12 updates about the cyberattack:

1. In a March 13 update posted to Stryker’s website, the medical technology company said its Surgical Visualization Platforms, Connected OR Hub and several endoscopy cloud and server products have not been impacted by the incident.
   
   
2. The products include Studio3, Datamediator, Hospital Status and Cisco Codecs.
   
   
3. Stryker said the systems do not rely on or integrate with the company’s affected internal environment and are architecturally separated from the disrupted network.
   
   
4. Because of that separation, clinicians can continue using the products during surgeries and hospitals can keep the systems connected to their networks.
   
   
5. The company said it is still working to determine the full impact of the cybersecurity incident on its internal environment.
   
   
6. Stryker said the disruption stems from a cybersecurity attack targeting its Microsoft environment but that it has no indication of ransomware or malware and believes the incident has been contained.
   
   
7. The company said it will continue providing updates to stakeholders as it manages the situation.
   
   
8. The American Hospital Association said it has not identified any direct disruptions to U.S. hospital operations. John Riggi, the AHA’s national adviser for cybersecurity and risk, told Becker’s March 12 the organization is actively exchanging information with hospitals and the federal government as the situation develops.
   
   
9. “At this time, we are not aware of any direct impacts or disruptions to U.S. hospitals as a result of this attack,” Mr. Riggi said. “That may change as hospitals evaluate services, technology and supply chain related to Stryker and as the duration of the incident continues.”
   
   
10. Hospitals have reported no operational disruptions from Stryker’s cyberattack. Spokespeople for Oakland, Calif.-based Kaiser Permanente and Fairfield, Calif.-based NorthBay Health told The Press Democrat March 12 they were aware of the situation but had no indication of any impact. Health systems such as Somerville, Mass.-based Mass General Brigham, Cleveland Clinic, Renton, Wash.-based Providence and St. Louis-based BJC HealthCare reported to Becker’s that they were also unaffected by the incident.
    
    
11. Stryker previously confirmed its LIFEPAK defibrillators and cardiac monitors, as well as its LIFENET patient data transmission system, remain operational, though some electronic patient care record vendors may have temporarily paused data transmissions as a precaution.
    
    
12. CNN reported March 11 that pro-Iran hackers claimed responsibility for the attack. Stryker has not confirmed that attribution.

At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.