Almeida Law Group is investigating a data breach at Sunrise Company. The breach was discovered on June 15th, 2026. If you were affected, contact Almeida Law Group.
About Sunrise Company
Sunrise Company is a privately held real estate developer and builder specializing in resort and golf course communities, headquartered in Palm Desert, California. Founded in 1963, the company has constructed more than 16,000 homes and condominiums and developed 22 resort communities across locations including the Coachella Valley, Las Vegas, Aspen, and Houston. Its operations span home construction, sales, marketing, and country club management. Because the company collects personal and financial information from employees and clients in the course of its business, a breach of its systems carries meaningful risks for those whose data was stored there.
What Happened?
Sunrise Company was listed in a Texas Attorney General data security breach report (record BR-0005214). According to that filing and a notification letter submitted to the California Attorney General’s Office on July 28th, 2026, the company detected suspicious activity on its systems and determined that an unauthorized actor acquired certain files from its network on April 23rd, 2026. The breach was discovered on June 15th, 2026, and affected 4,516 individuals in total. Affected consumers were notified by U.S. Mail. The compromised information includes names, addresses, Social Security numbers, and financial information such as account numbers and credit or debit card numbers.
Separately, the Akira ransomware group claimed responsibility for the attack. A May 26th, 2026 post tracked by Ransomware.live alleged that Akira was behind the intrusion and claimed to have obtained 13 GB of data, purportedly including employee personal information, sensitive documentation, client information, and financial records. These are attacker-side allegations from a dark web leak site and have not been confirmed by Sunrise Company or any regulatory authority. As of late July 2026, law firms including Shamis & Gentile P.A. and attorneys working with ClassAction.org are investigating whether a class action lawsuit can be filed against the company in connection with this breach; no suit has been filed yet.
Key Facts at a Glance
- Company or Organization: Sunrise Company
- Industry: Real estate development and construction (resort and golf course communities)
- Location: Palm Desert, California 92211
- Incident type: Unauthorized access to company network; files acquired by unauthorized actor; Akira ransomware group claimed responsibility (attacker allegation, unconfirmed)
- Date of breach: April 23rd, 2026
- Date breach discovered: June 15th, 2026
- Date of consumer notification: July 28th, 2026 (notification letter submitted to California Attorney General)
- Total persons affected: 4,516
- Prior breach: None identified
- Litigation status: No class action filed; Shamis & Gentile P.A. and ClassAction.org attorneys are investigating potential claims as of late July 2026
- Source: Texas Attorney General data security breach report, BR-0005214 (https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005214); California Attorney General breach list (https://oag.ca.gov/privacy/databreach/list-export); ClassAction.org investigation (https://www.classaction.org/data-breach-lawsuits/sunrise-company-july-2026); ClaimDepot investigation (https://www.claimdepot.com/investigations/sunrise-company-data-breach-2026)
What Should You Do?
If you received a notice from Sunrise Company, review it carefully for any identity protection enrollment offer and note any enrollment deadline. Because Social Security numbers and financial account information were exposed, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and monitor your bank and credit card accounts for unauthorized activity. You are entitled to a free credit report from each bureau annually at AnnualCreditReport.com. If you spot signs of identity theft or fraudulent accounts opened in your name, report them at IdentityTheft.gov, where you can also access a personalized recovery plan.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
