MalwareRansomwareData EncryptedRansom DemandedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Sequoia Financial Services
bd_c9b6572ad01da3bb · schema v1 · pii pii-v1
Full breach record for Sequoia Financial Services →Sequoia Financial Services, a provider of account receivable services, experienced a ransomware attack between June 28 and July 1, 2021. The attacker gained access and launched the attack, but it was blocked by anti-malware software. The company restored systems without paying the ransom. Personal information potentially compromised includes names, addresses, dates of birth, driver's license numbers, and limited health/insurance data. The company is working with law enforcement and Experian, offering 24 months of identity monitoring.
California clockDiscovered Jul 2, 2021 → Notified Aug 30, 202159d ✓ CA 60-day OK9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-544902
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 2, 2021
- Raw hash
- b2e35d6884cf06b670efcf4424e94991658cd050b4208a4a6d114017f1b4f56b
Reporting entity
- Name
- Sequoia Concepts, Inc.norm: sequoia concepts
Victim entity
- Name
- Sequoia Financial Servicesnorm: sequoia financial
Incident
- Discovered
- Jul 2, 2021
- Materiality determined
- —
- Notification sent
- Aug 30, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 59d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 2, 2021→ Notified: Aug 30, 202159d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.