HackingFinancial ServicesProfessional ServicesFinanceStolen CredentialsCustomer Data InvolvedData ExfiltratedEmploymentHealth (basic)Identity (basic)Government IDPHIHighContained

Sequoia Benefits And Insurance Services, LLC

bd_f8a0548d231e616e · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 17, 2022

Filed

Dec 12, 2022

To disclose

25 days

Affected

20,949state residents only

Linked

6 filings

Confidence

70%

Full breach record for Sequoia Benefits And Insurance Services, LLC →

Sequoia Benefits and Insurance Services LLC reported unauthorized access to a cloud storage system containing personal information of clients and dependents. The breach occurred between September 22 and October 6, 2022, and was discovered on November 17, 2022. Data accessed included names, addresses, SSNs, and health-related data. 20,949 Washington residents were affected. The company engaged Dell Secureworks for forensic review and offered 3 years of Experian identity protection services.

J jump to incidentP pin to compareR raw source

Washington clock✓ WA AG ≤30d25 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 56 days

discovery → filing · 25 days

Sep 22, 2022

Begins

Nov 17, 2022

Discovered

Dec 12, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_02c892d69e474d222022-12-12Verified
Massachusetts State AGbd_827a3139dd2c4b6a2022-12-14 · +2dVerified
South Carolina State AGbd_4207195f2012a95a2022-12-09 · +3dCandidate
Montana State AGbd_9aaf3f1a8fed5f8c2022-12-09 · +3dVerified

Show 1 more filing ↓up to 8d gap

HHS OCRbd_c71aac4f24c128b52022-12-20 · +8dVerified

Name: Sequoia Benefits And Insurance Services, LLC
norm: sequoia benefits and insurance

Name: Sequoia Benefits And Insurance Services, LLC
norm: sequoia benefits and insurance
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: Nov 17, 2022
Breach occurred: Sep 22, 2022 – Oct 6, 2022
Undetected for: 56 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 7, 2022
Affected individuals: 20,949state-resident count only
Data types: Identity (basic)Government IDEmploymentHealth (basic)
Data elements: NameSocial Security numberHealth insurance IDMedical informationDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Filed notification with Washington Attorney General
Initial access: valid_credentials

During the incident: Initiated a response plan
Retained outside counsel to assist in investigating this matter
Activated Dell Secureworks to conduct a thorough forensic review
Engaged a separate global consulting firm with cybersecurity expertise to serve as technical advisors to counsel
Changes made: Offering three years of identity protection services through Experian to impacted individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: WA AG ≤30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

South Carolina State AGDec 9 · first

Montana State AGDec 9 · first

New Hampshire State AG+3d

Washington State AG+3d · this page

Massachusetts State AG+5d

HHS OCR+11d

Pattern: first filing Dec 9 (SC), last Dec 20 (CA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA16856.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 12, 2022
Raw hash: 87848e6301555196bb67fe655079653b8be76324bbe00fbcdeb87cde693d9938

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entitySequoia Benefits And Insurance Services, LLC

Victim entitySequoia Benefits And Insurance Services, LLC

Incidentdiscovered Nov 17, 2022

Stated responseInitiated a response plan

ComplianceWA AG ≤30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com