Social EngineeringRetail & ConsumerRetailPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

SUN COMMUNITIES, INC.

bd_09a82c480dd15652 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 6, 2026

Filed

Feb 6, 2026

To disclose

4 weeks

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for SUN COMMUNITIES, INC. →

Sun Communities, Inc. reported a security incident to the New Hampshire Attorney General on February 6, 2026. The breach involved a social engineering attack (phishing) targeting two employees, leading to unauthorized access and data exfiltration from December 25, 2025, to January 5, 2026. The incident was discovered on January 6, 2026. Three New Hampshire residents were affected, with data including names, SSNs, DOB, driver's licenses, and financial account numbers exposed. Sun engaged forensic specialists, secured systems, and provided credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 12 days

discovery → filing · 4 weeks / 31 days

Dec 25, 2025

Begins

Jan 6, 2026

Discovered

Feb 6, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_18e6b9d04edcc52d2026-02-06Verified
Maine State AGbd_a1dc5635457ebc3b2026-02-06Candidate
Indiana State AGbd_c49b633c09ef84602026-02-06Verified
Indiana State AGbd_fca4cd81ff1c98f62026-02-06Verified

Name: SUN COMMUNITIES, INC.
norm: sun communities
Domain: suncommunities.com

Name: SUN COMMUNITIES, INC.
norm: sun communities
Domain: suncommunities.com
Industry: Retail & Consumerllm

Discovered: Jan 6, 2026
Breach occurred: Dec 25, 2025 – Jan 5, 2026
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 6, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Activated its incident response procedures
Shut down certain systems
Restricted the compromised users’ access
Worked with third-party forensics specialists to secure all systems and remediate further risks
Engaged third-party forensic specialists to identify the scope of the Incident and to assist with securing its systems and data
Taken steps to secure the affected accounts
Prevent reuse of the compromised credentials
Enhance monitoring for similar activity
Reinforced security awareness with its personnel regarding social engineering and MFA-related requests through several communication channels
Continues to actively monitor its network and information systems for any unusual activity
Providing complimentary credit monitoring and identity theft prevention services through Cyberscout, a TransUnion company
Changes made: Implementing its third-party forensics specialists’ recommendations to strengthen Sun’s administrative, technical, and physical safeguards to mitigate a recurrence of this type of incident in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Massachusetts State AGFeb 6 · first

Maine State AGFeb 6 · first

Indiana State AGFeb 6 · first

New Hampshire State AGFeb 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sun-communities-20260206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2026
Raw hash: bbc794fef1a0765e081f8b9949eb2c2bfeb82cb1d4d642dd1016e54947cbfcac

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySUN COMMUNITIES, INC.

Victim entitySUN COMMUNITIES, INC.

Incidentdiscovered Jan 6, 2026

Stated responseActivated its incident response procedures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov