HackingProfessional ServicesFinancial ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDEmploymentHealth (basic)MetadataMediumContained

SEQUOIA ONE PEO, LLC

bd_4dd21f20a312fc90 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 12, 2022

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

74%

Full breach record for SEQUOIA ONE PEO, LLC →

Sequoia One PEO LLC and Sequoia Benefits and Insurance Services LLC disclosed that an unauthorized party accessed a cloud storage system between September 22 and October 6, 2022. Potentially accessed data included names, addresses, SSNs, DOBs, employment status, wage data, member IDs, work emails, and COVID-related documents. No evidence of data misuse or continuing activity was found. Notifications sent December 2022 with 36-month Experian identity protection offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 22, 2022

Begins

Dec 12, 2022

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_ffa2848819b0efa72022-12-13 · +1dVerified
Delaware State AGbd_3dcf826fa7ff0db02022-12-07 · +5dCandidate
Indiana State AGbd_5de2eeabea1c6c532022-12-07 · +5dVerified

Name: SEQUOIA ONE PEO, LLC
norm: sequoia one peo

Name: SEQUOIA ONE PEO, LLC
norm: sequoia one peo
Also named: Sequoia One PEO LLC and Sequoia Benefits and Insurance Services LLCdba oflegal entity
Sequoia Consulting Groupdba oftrade name
Industry: Professional ServicesllmFinancial Servicesllm

Discovered: —
Breach occurred: Sep 22, 2022 – Oct 6, 2022
Materiality determined: —
Notification sent: Dec 7, 2022
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDEmploymentHealth (basic)Metadata
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1530 Data from Cloud Storage Object
Threat actor: External

During the incident: Initiated a response plan as soon as the Company became aware of the situation
Retained outside counsel to assist in investigating this matter
Activated through counsel Dell Secureworks to conduct a thorough forensic review
Engaged through counsel a separate global consulting firm with cybersecurity expertise to serve as technical advisors to counsel to supplement the security review
Notified clients and individuals of the breach
Offering three years of identity protection services through Experian to impacted individuals
Changes made: Offering complimentary access to Experian IdentityWorksSM for 36 months to impacted individuals
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Delaware State AGDec 7 · first

Indiana State AGDec 7 · first

California State AG+5d · this page

Maine State AG+6d

Pattern: first filing Dec 7 (DE), last Dec 13 (ME) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-559929
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 12, 2022
Raw hash: 5542e80a830a45a40d1ff7be55676564a46852a9659162bf5468bdf679d1908d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySEQUOIA ONE PEO, LLC

Victim entitySEQUOIA ONE PEO, LLC

IncidentUnauthorized Access

Stated responseInitiated a response plan as soon as the Company became aware of the situation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov