STRYKER CORPORATION

Stryker Corporation filed a supplemental 8-K on March 23, 2026, updating a previously disclosed cybersecurity incident. The Company worked with third-party experts (Palo Alto Networks Unit 42) and law enforcement to contain the incident. The threat actor used a malicious file to run commands and hide activity, but it was not capable of spreading. The Company states the incident is contained and has not identified evidence of the threat actor accessing customer, supplier, vendor, or partner systems. The investigation is ongoing, and the Company has not determined if the incident is material.