Sunrise Data Breach: 13GB of Sensitive Data Compromised

Sunrise Co., a real estate developer and home builder headquartered in Palm Desert, California, disclosed a data breach after an unauthorized actor accessed its computer network in April 2026.

Sunrise recently detected suspicious activity on its systems. In response, the company took steps to contain the event and launched an investigation to determine the nature and scope of the unauthorized activity.

The investigation found that on April 23, 2026, an unauthorized actor gained access to the company's network and acquired certain files. Following the intrusion, Sunrise conducted a thorough review of the potentially impacted data to determine what information was involved and which individuals were affected.

On May 26, 2026, the Akira ransomware group posted on the Tor network, claiming to have obtained 13 gigabytes of data from the company. The compromised data reportedly included employee personal information, CEO family information (such as passports, driver's licenses and death records), contracts and agreements, detailed financial records, client information and project files.

The type of consumer information confirmed as exposed in the company's notification included names and other undisclosed personal information.

The breach was reported to the California Attorney General. Consumer notification letters from Sunrise were mailed on July 28, 2026.

The total number of individuals affected by the breach has not been publicly disclosed.

Sunrise's response to the breach

Sunrise is offering affected individuals 24 months of complimentary credit monitoring and identity restoration services through Experian IdentityWorks.

Affected individuals can enroll in the services by visiting the Experian IdentityWorks enrollment page and entering the activation code included in their notification letter. The deadline to enroll is Oct. 31, 2026.

For questions about the incident, Sunrise has set up a dedicated help line at 1-833-931-5455, available Monday through Friday from 6 a.m. to 6 p.m. Pacific Time.

Affected individuals may also write to the company at 300 Eagle Dance Circle, Palm Desert, CA 92211.