Sonder Holdings Inc.
bd_b6b3b634195338f6 · schema v1 · pii pii-v1
Full breach record for Sonder Holdings Inc. →3 incidents on fileSonder Holdings Inc. experienced unauthorized access to an Amazon Web Services (AWS) account from May 21, 2022, to November 14, 2022. The company became aware of the incident on November 13, 2022, after receiving an unsolicited email alleging access. Affected data includes names, addresses, emails, phone numbers, dates of birth, government-issued IDs, last four digits of credit card numbers, usernames, IP addresses, and booking dates. Sonder disabled the compromised credentials, engaged forensic specialists, notified law enforcement, and offered 12 months of identity monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 21, 2022
Begins
Nov 13, 2022
Discovered
Feb 8, 2023
Filed
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Maine State AGbd_3dae2a6619faaf452023-02-08Candidate
- Montana State AGbd_d67cd7bea225e03c2023-02-08Verified by operator
- New Hampshire State AGbd_b918d2e6f1895acd2023-02-13 · +5dVerified
- Illinois State AGbd_b6ca4e3cf61feec42023-01-01 · +38dVerified by operator
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Feb 13 (NH) — a 43-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.