HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Sequoia Benefits And Insurance Services, LLC

bd_02c892d69e474d22 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 6, 2022

Filed

Dec 12, 2022

To disclose

10 weeks

Affected

1,975state residents only

Linked

6 filings

Confidence

66%

Full breach record for Sequoia Benefits And Insurance Services, LLC →

Sequoia Benefits and Insurance Services LLC reported a data breach affecting 1,975 New Hampshire residents. Unauthorized access to a cloud storage system occurred between September 22 and October 6, 2022. The incident exposed demographic data, SSNs, wage data, and health information. Sequia engaged Dell Secureworks for forensic review and AlixPartners for technical advisory services. Remediation included credential resets and offering 3 years of Experian credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 10 weeks / 67 days

Sep 22, 2022

Begins

Oct 6, 2022

Discovered

Dec 12, 2022

Filed

vs. sector median

+1 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Washington State AGbd_f8a0548d231e616e2022-12-12Verified
Massachusetts State AGbd_827a3139dd2c4b6a2022-12-14 · +2dVerified
South Carolina State AGbd_4207195f2012a95a2022-12-09 · +3dCandidate
Montana State AGbd_9aaf3f1a8fed5f8c2022-12-09 · +3dVerified

Show 1 more filing ↓up to 8d gap

HHS OCRbd_c71aac4f24c128b52022-12-20 · +8dVerified

Name: WILMER CUTLER PICKERING HALE AND DORR LLP
norm: wilmer cutler pickering hale and dorr

Name: Sequoia Benefits And Insurance Services, LLC
norm: sequoia benefits and insurance
Also named: Sequoia Benefits and Insurance Services LLCdba oflegal entity
Sequoia Consulting Group, Sequoia One PEO, LLCdba oftrade name
Industry: Financial Servicesllm

Discovered: Oct 6, 2022
Breach occurred: Sep 22, 2022 – Oct 6, 2022
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 8, 2022
Affected individuals: 1,975state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General John Formella
Initial access: exploit_public_facing

During the incident: Restricting system access and resetting credentials
Eliminating the issue that raised the concern
Retaining outside counsel to assist in investigating this matter
Activating through counsel Dell Secureworks, to conduct a thorough forensic review
Engaging, through counsel, AlixPartners, a global consulting firm with extensive cybersecurity expertise, to serve as technical advisors to counsel to supplement the security review
Changes made: Offering three (3) years of credit monitoring services to impacted residents through Experian’s® IdentityWorksTM credit monitoring services, free of charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(67 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

South Carolina State AGDec 9 · first

Montana State AGDec 9 · first

Washington State AG+3d

New Hampshire State AG+3d · this page

Massachusetts State AG+5d

HHS OCR+11d

Pattern: first filing Dec 9 (SC), last Dec 20 (CA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sequoia-20221212.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 12, 2022
Raw hash: dc5fa7049674e99970656db6c57140570bb3eadd41873396e41fb2890a42d4ca

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityWILMER CUTLER PICKERING HALE AND DORR LLP

Victim entitySequoia Benefits And Insurance Services, LLC

Incidentdiscovered Oct 6, 2022

Stated responseRestricting system access and resetting credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov