Sunrise, Toscana Country Club, AndalusiaCountry Club. Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 3, 2026, the Akira ransomware group listed Sunrise, Toscana Country Club, and Andalusia Country Club on its leak site and stated that internal files had been taken during a ransomware operation. The number of individuals whose information may be involved remains unknown, and no further details on the volume or contents of the material have been made public. The incident matters because the affected entities manage residential communities, club memberships, and real-estate transactions that routinely involve personal identifiers, contact details, and financial records of residents and members.

Inside the incident

The only confirmed information is the group’s listing and its assertion that internal files were exfiltrated. No date of intrusion, encryption, or ransom demand has been disclosed. The scale of the operation, the systems accessed, and whether data was later published are not stated in available records. Sunrise Company and the two country clubs have not issued public statements confirming or disputing the claim.

Inside akira

Akira is a ransomware operation that first appeared in early 2023. Public reporting has documented its use of double-extortion tactics: data is copied from targeted networks before encryption occurs, after which the group threatens to release the material if payment is not received. The group has claimed responsibility for intrusions across multiple industries, typically mid-sized organizations, and maintains a leak site to advertise stolen files. Its listing of any victim constitutes an unverified claim until corroborated by the organization or independent investigation.

Who is Sunrise, Toscana Country Club, AndalusiaCountry Club. Listed by akira Ransomware Group?

Sunrise Company, founded in 1963, develops resort and golf-course communities and has built more than 16,000 homes and condominiums along with hotels and commercial properties. Toscana Country Club operates as a private equity club and residential community in Indian Wells, California. Andalusia Country Club is a luxury golf and residential community near Palm Springs. These entities hold records related to property ownership, club membership, financial arrangements, and resident services.

The information in question

The only detail released is that internal files were removed. The precise categories of data, file counts, or time periods covered have not been disclosed. Organizations of this type commonly maintain member applications, billing histories, property records, and correspondence that can include names, addresses, identification numbers, and payment information. Without confirmation from the entities or further forensic reporting, the exact contents remain unconfirmed.

The real-world impact

Exposure of internal files from a real-estate developer and private clubs can create downstream risks for individuals whose records are present, such as misuse of personal or financial details. For the organizations, the incident may affect operational continuity and relationships with residents and members. The absence of confirmed data types or affected-person counts limits precise assessment of harm at this stage.

If your data was in this claimed breach

Individuals concerned about possible exposure should monitor financial accounts and credit reports for unusual activity, place fraud alerts if warranted, and change passwords on any accounts linked to the clubs or developer. They can also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.