SEQUOIA CAPITAL OPERATIONS, LLC

Sequoia Capital Operations, LLC notified the NH AG of a phishing incident on Jan 20, 2021, affecting ~1,105 individuals (2 NH residents). An unauthorized party accessed one employee's email for a wire diversion scam. Data exposed included names, addresses, SSNs, and passport numbers. Sequoia engaged forensic experts, notified law enforcement, enhanced security controls, and offered 24 months of credit monitoring.

Sequoia Capital Operations, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-02-22. 22 Massachusetts residents were affected. The report records the breach type as electronic.

Sequoia Capital Operations, LLC notified Montana residents of a cybersecurity incident discovered on January 20, 2021. An unauthorized third party gained remote access to an employee's business email mailbox via apparent phishing, aiming to conduct a wire diversion scam. The attacker may have accessed personal information contained in the mailbox. Sequoia engaged law enforcement and cybersecurity experts, secured the network, and offered 24 months of credit monitoring.

Sequoia Capital Operations, LLC notified the California AG of a cybersecurity incident where an unauthorized third party gained remote access to one employee's business email mailbox on or about January 20, 2021. The apparent aim was a wire diversion scam. The breach date listed on the form is January 7, 2021. Fewer than 1,000 California residents were affected. Personal information including names and potentially other PII was exposed. The company engaged cybersecurity experts, remediated the configuration issue, enhanced security protections, and offered 24 months of credit monitoring.