Sunrise Co. Suffers Data Breach After Akira Ransomware Attack in April 2026
Sunrise Co., a California-based real estate developer and home builder headquartered in Palm Desert, disclosed a data breach following an April 2026 cyberattack. The company detected suspicious activity on its systems and launched an investigation, confirming that an unauthorized actor accessed its network on April 23, 2026, and exfiltrated files.
On May 26, 2026, the Akira ransomware group claimed responsibility, posting on the Tor network that it had stolen 13 gigabytes of data, including:
- Employee and CEO family personal information (passports, driver’s licenses, death records)
- Contracts, financial records, and client data
- Project files and undisclosed consumer details (names and other personal information)
Sunrise completed its review and reported the breach to the California Attorney General, mailing notification letters to affected individuals on July 28, 2026. The total number of impacted individuals remains undisclosed.
In response, Sunrise is offering 24 months of free credit monitoring and identity restoration services through Experian IdentityWorks, with enrollment available until October 31, 2026. A dedicated helpline and mailing address have been established for inquiries.
Source: https://www.claimdepot.com/data-breach/sunrise-company-2026
Sunrise Company cybersecurity rating report: https://www.rankiteo.com/company/sunrise-company
"id": "SUN1785357186",
"linkid": "sunrise-company",
"type": "Ransomware",
"date": "4/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Real Estate',
'location': 'Palm Desert, California, USA',
'name': 'Sunrise Co.',
'type': 'Real estate developer and home builder'}],
'customer_advisories': '24 months of free credit monitoring and identity '
'restoration services through Experian IdentityWorks '
'(enrollment available until October 31, 2026)',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (passports, driver’s licenses, '
'death records, names, personal '
'information)',
'type_of_data_compromised': ['Employee and CEO family '
'personal information',
'Contracts',
'Financial records',
'Client data',
'Project files',
'Undisclosed consumer details']},
'date_detected': '2026-04-23',
'date_publicly_disclosed': '2026-05-26',
'description': 'Sunrise Co., a California-based real estate developer and '
'home builder, disclosed a data breach following an April 2026 '
'cyberattack. The company detected suspicious activity on its '
'systems and launched an investigation, confirming that an '
'unauthorized actor accessed its network on April 23, 2026, '
'and exfiltrated files. The Akira ransomware group claimed '
'responsibility and posted stolen data, including employee and '
'CEO family personal information, contracts, financial '
'records, and client data.',
'impact': {'data_compromised': '13 gigabytes of data',
'identity_theft_risk': 'High'},
'investigation_status': 'Completed',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Akira'},
'references': [{'source': 'California Attorney General breach notification'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
'California Attorney '
'General'},
'response': {'communication_strategy': 'Notification letters mailed to '
'affected individuals, dedicated '
'helpline and mailing address '
'established',
'third_party_assistance': 'Experian IdentityWorks (credit '
'monitoring and identity restoration '
'services)'},
'threat_actor': 'Akira ransomware group',
'title': 'Sunrise Co. Suffers Data Breach After Akira Ransomware Attack',
'type': 'Ransomware'}