On June 3, 2026, the Akira ransomware group listed internal files allegedly stolen from Sunrise Company, Toscana Country Club, and Andalusia Country Club on its leak site. The breach affects current and former residents, club members, employees, and anyone whose personal information was stored in the developer’s systems.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Sunrise, Toscana Country Club, AndalusiaCountry Club.
Get alerted the next time Sunrise, Toscana Country Club, AndalusiaCountry Club. files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Sunrise, Toscana Country Club, AndalusiaCountry Club.’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates that Akira exfiltrated internal documents during a ransomware attack on Sunrise Company, the real estate developer behind the two luxury communities. Sunrise, founded in 1963, has built more than 16,000 homes and condominiums as well as several resort hotels. Toscana Country Club in Indian Wells, California, and Andalusia Country Club near Palm Springs cater to high-end residential and golf communities. The exact number of individuals impacted remains unknown, and the precise data types have not been fully detailed in available reporting. The listing appeared on the Akira leak site on June 3, 2026.
Why This Matters for You and Your Family
When a company that manages resort properties and private clubs is breached, the information exposed often includes names, addresses, phone numbers, email accounts, dates of birth, and financial details tied to membership or home purchases. For families who live in these communities or have relatives who do, that data can be used to impersonate you, file fraudulent tax returns, open accounts in your name, or target your children. Internal files stolen in ransomware attacks frequently contain spreadsheets that link multiple family members, making it easier for criminals to build a complete picture of your household.
The Doxxing and Identity-Chain Risks
Stolen club membership lists and real-estate records often contain both real identities and online handles, creating a bridge that lets attackers move from one platform to another. A username found in the leak can be searched across gaming services, social media, and forums. Once linked back to an address or phone number from the Sunrise files, the chain can lead to doxxing, harassment, or account takeovers. Credential leaks like this one routinely cascade into gaming account compromises because children and teens often reuse email addresses or passwords tied to family memberships. The result is a single breach that can expose every linked account in your household.