Skip to content

Sequoia Concepts

Disclosed Sep 2, 20215 years ago2,230 affectedConfirmed

Official notice

The business associate (BA), Sequoia Concepts, reported that it experienced a ransomware attack affecting the protected health information (PHI) of 2,230 individuals. The PHI involved included names, Social Security numbers, addresses, dates of birth, and claims information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services to affected individuals and implemented additional administrative and technical safeguards.

What is known

People affected2,230 (as reported to HHS)
DisclosedSep 2, 2021
HappenedJun 28, 2021
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Sequoia Conceptsoag.ca.gov · Official notice
HHS OCR breach report (archive, resolved): Sequoia Concepts (Business Associate, CA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CASep 2, 2021
HHS archivetotalSep 2, 20212,230
History of this record
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 2230 · backfill source
  • 2026-09-25 · summary: empty to The business associate (BA), Sequoia Concepts, reported that it experienced a ransomware attack affecting the protected health information (PHI) of 2,230 individuals. The PHI involved included names, Social Security numbers, addresses, date · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Sequoia Concepts

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.