The company said it is still assessing and re-evaluating the scope, nature and operational and financial impact of the cybersecurity incident, and has not yet determined whether the incident is reasonably likely to have a material impact on the company.

1. 01

   The company said it is still assessing and re-evaluating the scope, nature and operational and financial impact of the cybersecurity incident, and has not yet determined whether the incident is reasonably likely to have a material impact on the company.

2. 02

   Stryker said that early in its investigation it had concluded the incident did not involve ransomware or malware. Working with Palo Alto Networks Unit 42 and other experts, it found that the malicious file the threat actor used to run commands and hide its activity was not capable of spreading inside or outside its environment.

3. 03

   Stryker said Unit 42 found no current evidence of active, ongoing unauthorized access as of 2026-03-20 15:20 UTC, and has found no unauthorized activity related to the incident since 2026-03-11. It attached the letter as Exhibit 99.1.

4. 04

   The company said it is working with Microsoft to restore its identity infrastructure. It is rebuilding affected systems or restoring them from backups predating the compromise window, and said systems not yet recovered have been isolated from the network.

Analysis scope · Filing body and confirmed press-release exhibitWe analyzed the filing body and confirmed exhibits. This is not a review of other exhibits, investor presentations or the full earnings call.

AI summarized the filing and translated the summary into English; it may differ from the original. For reference only, not investment advice. AI translated the published Korean report into English. Figures are copied as filed, not recalculated.

Original filing

The filing as submitted to SEC EDGAR. You can check the figures and statements of this summary against it.