Social EngineeringFinancial ServicesFinancePhishingBECTargetedCustomer Data InvolvedIdentity (basic)Government IDHighContained

SEQUOIA CAPITAL OPERATIONS, LLC

bd_2ba7b98b77580f2b · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 20, 2021

Filed

Feb 22, 2021

To disclose

5 weeks

Affected · nationwide

1,1052 in this filing

Linked

4 filings

Confidence

66%

Full breach record for SEQUOIA CAPITAL OPERATIONS, LLC →

Sequoia Capital Operations, LLC notified the NH AG of a phishing incident on Jan 20, 2021, affecting ~1,105 individuals (2 NH residents). An unauthorized party accessed one employee's email for a wire diversion scam. Data exposed included names, addresses, SSNs, and passport numbers. Sequoia engaged forensic experts, notified law enforcement, enhanced security controls, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 33 days

Jan 20, 2021

Discovered

Feb 22, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_5fb61f16214b9b202021-02-22Verified
Montana State AGbd_0b2d6ab6730d21c52021-02-18 · +4dCandidate
California State AGbd_0b393d1f5eeece3e2021-02-18 · +4dVerified

Name: SEQUOIA CAPITAL OPERATIONS, LLC
norm: sequoia capital operations
Domain: sequoiacap.com

Name: SEQUOIA CAPITAL OPERATIONS, LLC
norm: sequoia capital operations
Domain: sequoiacap.com
Industry: Financial Servicesllm

Discovered: Jan 20, 2021
Materiality determined: —
Notification sent: Feb 19, 2021
Affected individuals: 1,105state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: phishing_link

During the incident: Engaged outside cybersecurity experts to help remediate any vulnerabilities and ensure the ongoing security of our systems
Contacted law enforcement about the incident
Terminated unauthorized access
Conducted dark web monitoring
Changes made: Identified and remediated the configuration that permitted the initial access
Deployed additional prevention and detection technology at multiple layers to improve visibility into anomalous user activity and malicious email content
Reviewed the methods we use to store and share sensitive information inside and outside the company, including email message forwarding rules
Refreshed our security training with additional emphasis on phishing awareness and proper data handling
Engaged Experian to provide 24 months of free credit monitoring and identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGFeb 18 · first

California State AGFeb 18 · first

Massachusetts State AG+4d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sequoia-capital-operations-20210222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 22, 2021
Raw hash: 07fa75464b7ed309b9d98fc7890bd9eacc21232d2e6b242784ca738eeeedfdad

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySEQUOIA CAPITAL OPERATIONS, LLC

Victim entitySEQUOIA CAPITAL OPERATIONS, LLC

Incidentdiscovered Jan 20, 2021

Stated responseEngaged outside cybersecurity experts to help remediate any vulnerabilities and ensure the ongoing security of our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov