Akira ransomware group claims data breach against Sunrise, Toscana Country Club, and Andalusia Country Club

• Ransomware group: Akira
• Country: United States
• Sector: Hospitality
• Announcement date: May 26, 2026

Akira ransomware group claims data breach against Sunrise and luxury club projects

The Akira ransomware group has announced on its leak site that it has allegedly compromised data belonging to Sunrise Company and its associated entities, including Toscana Country Club and Andalusia Country Club. The announcement, made on May 26, 2026, claims that the group has successfully exfiltrated a significant amount of corporate information. While the group's specific details regarding the attack are limited, they have asserted that they intend to publish the stolen data.

The details of the alleged attack

According to the claim made by the Akira group, the breach involves a substantial volume of information. The group asserts that it has obtained 13 GB of corporate data belonging to the affected organizations. This claim was officially posted on May 26, 2026, which coincides with the date the group claims the attack took place. No screenshots of the stolen data were provided in the announcement to verify the claims.

The Akira group is recognized in the cybersecurity landscape as a ransomware actor that frequently employs double extortion tactics. In such scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to leak the stolen information on public leak sites, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of sensitive corporate and personal details.

Alleged sensitive data involved in the leak

The announcement specifies that the data allegedly stolen includes a wide variety of sensitive information. The contents of the 13 GB of data, as claimed by the group, reportedly include:

• Employee personal data
• Passport and driver's license information of the CEO's family
• Death records
• Contracts
• Detailed financials
• Client information
• Project files

About Sunrise Company and its projects

Sunrise Company is a real estate development and construction firm. The company specializes in the development of resort and golf course communities. Among its notable luxury residential and private club projects are the Toscana Country Club and the Andalusia Country Club, both of which are located in Indian Wells, California.

Implications and potential risks of the breach

The potential exposure of the data claimed by Akira carries significant risks for the affected parties. For the employees and clients of Sunrise Company, the theft of personal information, including passports and driver's licenses, significantly increases the risk of identity theft. Furthermore, the exposure of financial records and personal documents can provide a foundation for highly targeted phishing attacks, where attackers use specific details to gain the trust of victims.

Because the affected entities are based in the United States, this breach could lead to complex legal consequences. The organization may face scrutiny under state-level data protection laws and potential federal regulations. Beyond the immediate operational disruptions caused by such an attack, the organization may suffer substantial reputational damage due to the nature of the leaked information.

In response to such incidents, organizations often face the obligation to fulfill data breach notification requirements, ensuring that all affected parties are informed of the compromise. To defend against such threats, organizations in the hospitality and real estate sectors typically focus on strengthening their perimeter defenses, implementing robust access controls, and maintaining comprehensive monitoring to detect unauthorized data exfiltration before it reaches a critical scale.