Spectrum Solutions
bd_49a5d8bd76d33cd8 · schema v1 · pii pii-v1
Full breach record for Spectrum Solutions →2 incidents on fileThreat-actor claim — not a regulatory filing
This row is a claim by the ransomware group ALPHV / BlackCat on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Our Story Since 2006, Spectrum Solutions has been a single-source provider of high-quality, direct-to-consumer product innovation & global fulfillment. For the last decade, Spectrum has found a specialized focus in the medical science sector that includes the engineering and manufacturing of industry innovating medical devices. Spectrum’s innovation has made such an impact within the life science sector it has been honored with several prestigious awards, received incredible industry and private sector recognition, and is directly responsible for the birth of a new billion-dollar saliva diagnostic industry. We engineer and have medical device contract manufacturing, actively participate in medical science research programs, develop, and license diagnostic testing assays, we are uniquely able to offer our contract manufacturing and MedTech outsourcing customers measurable process optimization, a shorter time to market window, unmatched scalability, and full product development-to-delivery solutions. Sometimes a fresh perspective on something we thought we understood, can open the door of new possibilities we hadn’t even considered. Focused on pioneering medical device innovation, Spectrum Solutions commissioned the breakthrough saliva study that dared to suggest a complete transformation in viral PCR testing protocols to an easier, pain-free, non-invasive, 99.998% accurate, and infinitely safer option using saliva (spit). Saliva’s recent MVP status is a new development even though saliva’s been used in diagnostics for more than 2000 years. Analysis of the properties in saliva using biochemical and physiological methodologies are traced back to at least a century ago. Unlike blood, saliva analysis looks at the cellular level (the biologically active compounds), making it a better representative of what is clinically relevant. Years from now, the medical community, patie
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Nov 24, 2023
Claim posted
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
alphv
According to ransomware.live, The operators of the ALPHV/BlackCat ransomware began their activity in December 2021, making posts on Dark Web forums to promote their affiliate program, offering other actors the opportunity to engage in a 'new type of ransomware family' developed from scratch using the Rust programming language. Some clear evidence indicates that the actors behind this new ransomware are not new to cybercrime, and there were links to other affiliate programs such as DarkSide, BlackMatter, and REvil. (After several attacks against large companies, these groups faced pressure and arrests, necessitating the termination of their operations). As a security measure, the operators of ALPHV implemented the requirement for the execution of the ransomware payload by providing an 'access token,' which is supplied by the owners of the Ransomware-as-a-Service to the affiliate. This token is added to the victim's ransom note so that they can contact the threat actor responsible for encrypting the data. ALPHV affiliates employ double and triple extortion techniques, meaning the publication of the company's name on leak sites, threats of data leakage, and lastly, threats of DDoS attacks against the organization. Source: https://github.com/crocodyli/ThreatActors-TTPs