Christopher Dobbins

Profile narrative

Christopher Dobbins, also known by his alias, is an individual based in the United States who was formerly employed as a vice president at Stradis Healthcare, a medical equipment packaging company located in Georgia. His public profile stems from a single incident in which he abused his former privileged access after being terminated in March 2020. The actor’s actions are documented in open‑source reporting that identifies him as the perpetrator of a deliberate sabotage of internal electronic records.

The targeting observed in this case was confined to the healthcare packaging sector, specifically affecting a domestic supplier of personal protective equipment during the COVID‑19 pandemic. The strategic objective demonstrated was the disruption of the victim’s shipping processes, which resulted in delays to the distribution of critical medical supplies to healthcare providers. No evidence points to espionage, financial gain, or any broader ideological aim beyond the immediate act of causing operational harm.

The tactics, techniques, and procedures described involve the creation of a secondary user account without authorization, followed by the editing of over 115,000 records and the deletion of more than 2,300 entries within the company’s electronic systems. No malware families, exploit tools, or sophisticated intrusion frameworks were referenced in the reporting; the activity relied solely on legitimate account manipulation to alter and remove data. This approach illustrates a low‑complexity insider threat that leveraged existing access rather than external vectors.

Attribution to the individual is clear from legal proceedings, with no indication of state sponsorship, affiliation with a criminal consortium, or involvement in any larger campaign. The notable operation associated with Christopher Dobbins is the March‑2020 sabotage of Stradis Healthcare’s records, which led to a criminal conviction, a sentence of one year and one day in prison, and a restitution order of $221,200 for the financial impact caused by the disruption. This incident remains the sole publicly reported activity linked to the actor.

Incidents

Attributed incidents are available to members.