The sequence follows dates visible in the sources, from the June 2020 self-description through the August 2026 response and removal of evidence links. Records without a reliable date remain in a separate group rather than being assigned a speculative place.
Oldest → newest · filter by evidence category
discordCorroborated
First-name self-description preserved
Two captures made roughly two hours apart preserve the six-year-old message before and after a targeted edit. The first names Tom and Illinois; the second removes those identifying sentences, retains the networking details, and carries Discord’s edited marker.
“Hi all, I'm Tom.”
— SuddenlyEngineer
Editorial conclusion: SuddenlyEngineer made the edit to cover his tracks after people began connecting the account to Tom. The narrow observation window, age of the post, and precise removal of its identifying opening support that interpretation.
Before · complete supplied capture.After · complete supplied capture.
HackerOne displays Thomas Hildebrand and suddenlyengineer together on a public profile with a December 2020 join date, providing the file’s direct name-to-username link.
UI-Tom’s Discord profile shows a June 27, 2022 member-since date and a visible Ubiquiti Employee role, placing the employee-tagged persona in the server during Hildebrand’s first publicly listed month at the company.
Role labels are recorded as interface labels, not standalone identity proof.
SuddenlyEngineer refers to “Mods of the unofficial discord.” The wording records the server’s public framing and its moderator group; the account’s later statement supplies the direct claim of membership.
“Mods of the unofficial discord don't get anything fun ☹️”
— SuddenlyEngineer
The later direct moderator self-description is preserved separately.
The r/Ubiquiti moderator list dates u/Suddenly_Engineer’s appointment to December 18, 2023 and shows broad authority over users, content, settings, and community functions.
Moderator advances Ubiquiti’s answer to security report
In a vulnerability thread, Suddenly_Engineer appears with a Moderator label, points readers to a Ubiquiti representative’s statement, and calls the report “a non-issue.” Reddit attributes the later deletion to the original poster.
“Here’s Marcus from UI’s statement on it. tl;dr they were doing it entirely wrong and this is a non-issue.”
Product question redirected from the unofficial Discord
When a participant asks the “Ubiquiti Team” about shortages, SuddenlyEngineer calls the Discord unofficial and redirects the question to the store. The exchange records the account’s public positioning of the server rather than an enforcement action.
“why are you posting on an unofficial discord instead of emailing the store”
— SuddenlyEngineer
The full visible question and response are preserved together.
UWC posts locked following requests from Ubiquiti legal
In a locked UWC thread, moderator cpr0mpt-cmd says the team receives requests from Ubiquiti legal to lock posts. The statement documents company influence on some decisions without assigning those locks to Suddenly_Engineer.
Russia-related posts removed while moderator joins the cleanup
Two Russia-related pages carry Reddit’s “Removed by moderator” notice. Suddenly_Engineer describes the team’s cleanup in one and, while visibly labeled Moderator, tells the poster to stop spamming in the other.
“Trying to clean this up as best we can. It just doesn’t end.”
— Suddenly_Engineer
Reddit attributes the removals to the team, and the surviving exchanges show Suddenly_Engineer actively participating in the containment of both discussions. The internal action log and the operator of each removal remain private.
SuddenlyEngineer distinguishes himself from an employee by saying, “I’m just a discord mod,” then directs the discussion to UI-Tom. The role is stated by the account itself.
SuddenlyEngineer directs a public message to UI-Tom as the employee contact. The line establishes an interaction between the accounts while supplying no information about their private relationship or operators.
UI-Tom jokes that he uses SuddenlyEngineer as a “human spam filter,” and SuddenlyEngineer responds with a reaction GIF. The exchange documents familiarity and also complicates the single-operator attribution.
“I just use @SuddenlyEngineer as my human spam filter”
— UI-Tom
The supplied screenshot controls speaker attribution.
SuddenlyEngineer writes “THIS IS UNOFFICIAL” beneath a notice that the parent message was deleted. The account’s wording is visible, while the absent parent leaves the precise subject unresolved.
“THIS IS UNOFFICIAL”
— SuddenlyEngineer
The capture preserves the reply, but not the deleted parent message.
A prepublication Discord message requested comment, corrections, and context. The platform said it could not be delivered, establishing the outreach attempt without establishing receipt or refusal.
Reddit and Discord announced Tom’s removal after community objections. SuddenlyEngineer agreed with the decision, said he should have stepped down years earlier, and acknowledged that retaining authority through his personal account undermined community trust.
“I should have stepped down years ago … maintaining a personal account with moderation privileges has undermined community trust.”
— SuddenlyEngineer
Tom’s departure satisfies the central request that he leave both moderator roles. His acknowledgment confirms the historical conflict and leaves the teams to explain earlier decisions and the safeguards they will adopt.
Discord announcement and response.Reddit announcement and response.
The follow-up Discord discussion says Tom approached the team in May 2022 intending to step down, but moderators supported keeping his personal authority beside a separate employee account. Members raise nondisclosure, trust, and § 255.5 concerns; moderator or administrator speakers answer several of them with ridicule, insults, and instructions to leave.
“Meanwhile, we all laughed our asses off while he was doing that. If you don’t like it, you can fucking leave.”
— spot · t.c.o.a. · Discord moderator
The team’s own account establishes prior knowledge and a deliberate decision to retain the arrangement. The publication describes the treatment of critics as degrading based on the quoted language preserved in the export.
The full linked export preserves the discussion that followed.
Publishable source images entered the local archive with SHA-256 checksums so later file changes can be detected and each exhibit can be tied to a specific preserved asset.
Moderators remove two comments linking the investigation
LifeChange0900 and prisonerofmemewar separately link suddenlyui-tom.com beneath the Reddit removal announcement authored by u/iKjQ2a4v, whom Suddenly_Engineer addresses as Jon. Later captures preserve both reply branches with “Comment removed by moderator” replacing the link-bearing text. Reddit names no responsible moderator or rule.
“Comment removed by moderator”
— Reddit interface
The matching branches document two removals targeting the same evidence link in one accountability thread. The publication concludes that the repeated action was active suppression of the link; the public interface cannot identify who acted or recover an undisclosed rationale.
First moderator-removal record.Second moderator-removal record.
The source material does not supply a reliable event date, so these exhibits remain outside the dated sequence.
archiveCorroborated
Legacy YouTube path appears
A historical capture preserves /user/trhildebrand96/ beside a SuddenlyEngineer preview, corroborating the older Hildebrand-based account trail without establishing continuous ownership.
A public comment by u/Suddenly_Engineer discusses experience with Ubiquiti support and network configuration, fixing the account’s ordinary participation in r/Ubiquiti.
UI-Tom replies “Can confirm” after another participant describes the account as a possible new employee. No date or legal identity appears in the capture, so it remains contextual evidence.
“Can confirm”
— UI-Tom
The surrounding lines are preserved to show what the short reply refers to.
SuddenlyEngineer links a legacy-interface announcement and UI-Tom replies using “we” while discussing the new interface. The paired captures document the interaction and supply no basis for a claim of privileged access or shared control.