Sonder Holdings Inc.
bd_b918d2e6f1895acd · schema v1 · pii pii-v1
Full breach record for Sonder Holdings Inc. →3 incidents on fileSonder Holdings Inc. notified the New Hampshire Attorney General of a data incident involving unauthorized access to an AWS account. The threat actor accessed the account between May 21, 2022, and November 14, 2022, using a compromised credential. Approximately 16 New Hampshire residents were affected, with data including names, addresses, government IDs, and usernames exposed. Sonder disabled access, engaged forensic specialists, notified the FBI, and offered 12 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 21, 2022
Begins
Nov 14, 2022
Discovered
Feb 13, 2023
Filed
vs. sector median
+2 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Maine State AGbd_3dae2a6619faaf452023-02-08 · +5dCandidate
- California State AGbd_b6b3b634195338f62023-02-08 · +5dVerified
- Montana State AGbd_d67cd7bea225e03c2023-02-08 · +5dVerified by operator
- Illinois State AGbd_b6ca4e3cf61feec42023-01-01 · +43dVerified by operator
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Feb 13 (NH) — a 43-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.