Sonder Holdings Inc.
bd_b6b3b634195338f6 · schema v1 · pii pii-v1
Full breach record for Sonder Holdings Inc. →Sonder Holdings Inc. experienced unauthorized access to an Amazon Web Services (AWS) account from May 21, 2022, to November 14, 2022. The company became aware of the incident on November 13, 2022, after receiving an unsolicited email alleging access. Affected data includes names, addresses, emails, phone numbers, dates of birth, government-issued IDs, last four digits of credit card numbers, usernames, IP addresses, and booking dates. Sonder disabled the compromised credentials, engaged forensic specialists, notified law enforcement, and offered 12 months of identity monitoring.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3dae2a6619faaf45Maine State AGfiled 2023-02-08Candidate
- bd_d67cd7bea225e03cMontana State AGfiled 2023-02-08Verified by operator
- bd_b918d2e6f1895acdNew Hampshire State AGfiled 2023-02-13(5d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-562895
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 8, 2023
- Raw hash
- 7c2c1d7b0f8bca19ba3984994dc7c8de8f04e8df64517872b5341c1c435f28d8
Reporting entity
- Name
- Sonder Holdings Inc.norm: sonder holdings
Victim entity
- Name
- Sonder Holdings Inc.norm: sonder holdings
Incident
- Discovered
- Nov 13, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSLOCATIONBEHAVIOR
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1078.004 Cloud Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 12 weeks(87 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.