Cyber Incident Victim: Stradis Healthcare
Date:
Mar 2020
Location:
United States of America
Summary
A disgruntled former executive of a healthcare packaging company sabotaged internal systems by creating unauthorized accounts to manipulate and delete critical electronic records, disrupting operations during a global health crisis. The deliberate alteration of over 115,000 records and deletion of thousands more caused significant delays in shipping essential protective equipment to medical providers. Following an investigation, the perpetrator was sentenced to prison and ordered to pay substantial financial restitution for compromising vital supply chains at a critical time.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
Christopher Dobbins, a former vice president at Georgia-based medical packaging company Stradis Healthcare, engaged in a deliberate cyber sabotage campaign against his former employer following his termination in March 2020. After losing his position, Dobbins created an unauthorized secondary user account to access Stradis' electronic records systems without permission. Between March and an unspecified later period, he executed destructive actions that included modifying approximately 115,000 database records and permanently deleting at least 2,300 critical entries. These alterations targeted operational data essential for coordinating shipments, specifically impacting the company's ability to process and deliver packaged medical supplies. The sabotage occurred during the initial surge of COVID-19 cases in spring 2020, when healthcare systems globally faced severe shortages of protective equipment.
The Federal Bureau of Investigation (FBI) attributed significant supply chain disruptions directly to Dobbins' unauthorized system modifications, which corrupted shipping schedules and inventory records. These disruptions delayed deliveries of personal protective equipment (PPE) to healthcare providers at a peak period of pandemic-related demand. Law enforcement investigators reconstructed Dobbins' account creation and data manipulation through forensic analysis, leading to federal charges. In January 2021, a U.S. court sentenced Dobbins to one year and one day in federal prison and ordered him to pay $221,200 in restitution to Stradis Healthcare. Prosecutors emphasized the heightened recklessness of compromising medical supply logistics during a global health emergency, noting the cascading effects on frontline medical workers awaiting protective gear. The company undertook unspecified recovery efforts to restore data integrity and resume normal operations following the investigation.