STRYKER CORPORATION

Stryker Corporation filed an 8-K on March 12, 2026, reporting a cybersecurity incident discovered on or about March 11, 2026, that disrupted its Microsoft environment globally. Operations including order processing, manufacturing, and shipping were affected, though patient services and connected products were reportedly unimpacted. The investigation is ongoing, and the full scope and financial impact remain unknown.

Stryker Corporation filed a supplemental 8-K on March 23, 2026, updating a previously disclosed cybersecurity incident. The Company worked with third-party experts (Palo Alto Networks Unit 42) and law enforcement to contain the incident. The threat actor used a malicious file to run commands and hide activity, but it was not capable of spreading. The Company states the incident is contained and has not identified evidence of the threat actor accessing customer, supplier, vendor, or partner systems. The investigation is ongoing, and the Company has not determined if the incident is material.