Social EngineeringPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
SUN COMMUNITIES, INC.
bd_09a82c480dd15652 · schema v1 · pii pii-v1
Full breach record for SUN COMMUNITIES, INC. →Sun Communities, Inc. reported a security incident to the New Hampshire Attorney General on February 6, 2026. The breach involved a social engineering attack (phishing) targeting two employees, leading to unauthorized access and data exfiltration from December 25, 2025, to January 5, 2026. The incident was discovered on January 6, 2026. Three New Hampshire residents were affected, with data including names, SSNs, DOB, driver's licenses, and financial account numbers exposed. Sun engaged forensic specialists, secured systems, and provided credit monitoring services.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a1dc5635457ebc3bMaine State AGfiled 2026-02-06Candidate
- bd_c49b633c09ef8460Indiana State AGfiled 2026-02-06Verified
- bd_fca4cd81ff1c98f6Indiana State AGfiled 2026-02-06Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/sun-communities-20260206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2026
- Raw hash
- bbc794fef1a0765e081f8b9949eb2c2bfeb82cb1d4d642dd1016e54947cbfcac
Reporting entity
- Name
- SUN COMMUNITIES, INC.norm: sun communities
- Domain
- suncommunities.com
Victim entity
- Name
- SUN COMMUNITIES, INC.norm: sun communities
- Domain
- suncommunities.com
Incident
- Discovered
- Jan 6, 2026
- Materiality determined
- —
- Notification sent
- Feb 6, 2026
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.