On March 11, 2026, Stryker (a $25 billion medtech company with 56,000 employees and operations in 61 countries) had its global Microsoft environment wiped by a cyberattack attributed to an Iran-linked threat actor. Devices were remotely disabled, employees were told to disconnect from all networks and not turn on company-issued devices, and the electronic ordering system went offline. As of this writing, there is no timeline for full restoration.
Stryker has said that orders entered before the attack will ship once systems are restored. Orders placed after the event are still being sorted out.
If you're a CSCO or supply chain leader at a health system that relies on Stryker for orthopedic implants, Mako robotic surgery consumables, Vocera communications hardware, or LifePak devices, that paragraph should have made your stomach drop a little.
The disruption isn't theoretical. The gap in your supply continuity is happening right now, in real time, to a real supplier. The question is whether your inventory position can absorb it.
This Isn't a Cybersecurity Problem. It's an Inventory Problem.
Every time there's a major supply chain event: a cyberattack, a port shutdown, a manufacturing recall, or a natural disaster, the conversation immediately gravitates toward the vendor. What happened? How long will it take to fix? Who's responsible?
Those are the wrong first questions for a supply chain leader. The right first question is: what's my exposure, right now, based on what I have on hand?
If you can answer that question with confidence: if you know your current inventory position against PAR, know which single-source items are at risk, know exactly how many days of Stryker implant stock you have across your health system, then you're already ahead of most. You can manage the disruption.
If you can't answer it cleanly, you have a PAR problem. Not a Stryker problem. A PAR problem.
The Stryker situation is acute and visible. But the inventory vulnerability it's exposing was already there. It was there last month, and it'll be there three months from now if nothing changes. The cyberattack is just the thing that made it impossible to ignore.
How Most Health Systems Actually Set PAR Levels
Let's be honest about how PAR levels get established and maintained at most health systems. Someone set them, maybe years ago, based on average usage, standard vendor lead times, and whatever the system suggested. They've been adjusted periodically, usually reactively: a stockout happens, the PAR goes up. A cost initiative hits, they get trimmed. An item gets consolidated and the PAR transfers imperfectly.
What very few organizations do systematically is evaluate PAR levels through a disruption lens. That means asking not just "how much do we need to keep up with normal demand" but "how much do we need to keep functioning if this supplier can't accept orders for 7, 14, or 30 days?"
Those are two very different numbers. For single-source, high-criticality items, the gap between them is where your operational risk lives.
"Many hospitals don't know what they have, where it is, or how much of it is left. This lack of visibility means they can't make educated or quick decisions on reallocating resources or responding to emergencies." Ed Barber, SVP, Advisory, Point of Use and MRO Solutions, RiseNow
We've seen health systems that thought they had strong inventory practices discover, but when they looked into the data, their real accuracy was nowhere near what they assumed. The Stryker situation is forcing that reckoning for a lot of teams right now. The difference between organizations that come through this cleanly and those that don't comes down to one thing: how well they know their own inventory position.
What a Real Disruption Buffer Looks Like
For items sourced predominantly from a single supplier with no approved substitute, your PAR level should account for a disruption scenario, not just normal replenishment. In practice, that means:
• Identifying every item in your formulary where Stryker (or any other single supplier) is your only source
• Calculating current days-on-hand against realistic usage rates, not theoretical ones
• Setting a disruption buffer on top of your standard PAR for those items, typically 15 to 30 additional days of supply depending on criticality and substitutability
• Having pre-approved alternates on contract before an emergency, not during one
• Knowing which items your surgeons will accept a substitution for and which are non-negotiable
That last point matters more than most supply chain leaders get credit for. Surgeon preference is a real variable in implant supply continuity, and it needs to be part of your disruption planning, not an afterthought when a case is about to be rescheduled.
The Deeper Problem: Visibility
The operational challenge in a disruption like Stryker's isn't just stock levels. It's visibility. Can you pull a real-time picture of your Stryker-sourced inventory right now? Across all facilities? Including consignment?
Most health systems can't do that quickly. Inventory data lives in multiple systems, consignment is often tracked manually or not at all, and the data that does exist is frequently stale. When a disruption hits, supply chain teams end up running physical counts and making calls to OR coordinators instead of working from a live dashboard.
That's not a failure of people. It's a failure of the operating model: specifically, the absence of a visibility infrastructure that makes disruption response fast and data-driven rather than slow and reactive.
A disruption like Stryker's doesn't create new problems. It reveals the problems that were already there.
Health systems that have done the work to build real inventory visibility, accurate, system-connected, accessible to the right people, are managing this week differently than those that haven't. They're moving fast because they can see clearly. Everyone else is scrambling.
What to Do This Week
The Stryker situation is still actively unfolding. If you haven't already done this, here's where to start right now:
Get a clear picture of your current Stryker-sourced inventory position.
Not an estimate. Actual on-hand quantities by item, by location, including consignment. If you can't pull that quickly, that's the first thing to fix.
Identify your single-source exposure across the formulary, not just Stryker.
Stryker is the event today, but the vulnerability it's exposing applies across every supplier where you have no approved alternate. Map it.
Talk to your OR leadership now.
Know which cases are dependent on Stryker items in the next 30 days. Know which can be substituted and which can't. Don't let that conversation happen during a scheduling crisis.
Activate your GPO and distributor relationships.
If emergency sourcing becomes necessary, those channels need to be warm before you need them. A call today is worth five calls next week.
Document what you learned.
Whatever gap this situation exposes in your inventory visibility, your PAR settings, or your alternate sourcing readiness, write it down and make it the basis for a structured review. The worst outcome from a disruption like this is coming through it and going back to the way things were.
Use This as the Forcing Function
We've worked with health systems that knew - really knew - that their inventory practices needed to be rebuilt. The data accuracy wasn't there, the PAR levels hadn't been touched in years, and the visibility infrastructure was patchwork at best. But the urgency to do something about it was always getting crowded out by whatever the immediate operational fire was.
That's the normal state for most supply chain organizations. The work that matters most keeps losing to the work that's loudest.
Stryker just made PAR levels and inventory visibility the loudest thing in the room for hospital leadership. That's a window. Use it.
If your CSCO or CFO is asking questions right now about supply chain resilience, this is the moment to bring a structured answer, not a reassurance, but a real assessment of where you stand and what it would take to close the gaps.
That conversation is a lot easier when you have data. Which is exactly what a proper inventory and distribution assessment is designed to surface.
--
RiseNow's self-assessments for healthcare supply chain leaders are designed to give you an honest picture of where you stand, not a maturity score to frame on the wall, but an operational diagnostic you can act on.
The Inventory and Distribution Performance Maturity Index evaluates your inventory visibility, PAR management practices, distribution performance, and resilience posture, and shows you specifically where the gaps are.
Take the Inventory and Distribution Performance Maturity Index: scorecard.risenow.com/inventory-and-distribution-performance-maturity-index
The Clinical Supply Availability and POU Readiness Maturity Index looks at your point-of-use operations and clinical supply availability, the front line of what your clinicians experience when supply chain breaks down.
Take the Clinical Supply Availability and POU Readiness Maturity Index: scorecard.risenow.com/clinical-supply-availability-and-pou-readiness-maturity-index
Both take less than 5 minutes, and they’ll tell you something your team likely already suspects but hasn't had a structured way to surface.
Or if you're past the assessment stage and you know you need to move, book a diagnostic with our healthcare supply chain team. We've helped health systems rebuild inventory visibility and PAR governance from the ground up, and we can help you figure out exactly where to start.
--
Sources: MedTech Dive (March 11, 2026), Stryker public statement and SEC 8-K filing (March 12, 2026), Check Point Research, Palo Alto Networks Unit 42. Stryker investigation is ongoing; details may change.
