Continental
bd_368a17a2340bedc9 · schema v1 · pii pii-v1
Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Black Basta on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
CULTURE-BUILDING EXPERTS Founded in Detroit, Michigan in 1989, Continental has grown from an office coffee and vending provider to the Midwest leader in workplace food and beverage offerings. Spanning across Michigan, Indiana, Ohio and into Pennsylvania and New York through the acquisition of Cuyahoga Franklin Group, Continental serves clients of all sizes, from international industry leaders to small businesses, including manufacturing, technology, healthcare, education, commerce and more. With a cutting-edge technology suite, best-in-class logistics and infrastructure, and a commitment to personal client attention, we consistently rank as one of the top contract dining and refreshment providers in the nation. From 24/7 micro-markets to full-service cafés and food delivery, our customized programs provide the resources of a global company with the responsiveness only a local partner can offer.SITE: www.continentalserves.com Address : 700 Stephenson Hwy, Troy, MI 48083 United StatesTEL#: 248.414.1700ALL DATA SIZE: ≈900gb 1. Users, employees personal folders and docs 2. Financial data 3. Personal documents employees 4. Tax data 5. NDA’s, Confidential data 6. Human Resources & etc...
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Oct 18, 2024
Claim posted
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.