Additional reporting available at the WSJ[1]. Reading between the lines it sounds like the group responsible got access to a Microsoft 365 or Intune administrator account.

[1] https://www.wsj.com/articles/stryker-hit-with-suspected-iran...

Flagging due to editorialized headline, no such claim was made in the article. Maybe it was changed after submission.