norm: sunrunUSLEI 54930007SJ77CI66U531 · no CIKMax severity: Medium

Canonical registry

SUNRUN INC.

ent_019ec8451bd44f959acb23526e027afe

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: SUNRUN INC.
Normalized: sunrun— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 54930007SJ77CI66U531
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

🐻California State AGas victim2017-02-02
On January 20, 2017, Sunrun Inc. experienced a targeted phishing scam where a scammer impersonated the CEO to request employee W-2s from the payroll department. The phishing email was not recognized as a scam, resulting in the external disclosure of 2016 W-2s for current and former employees. Affected data included names, addresses, Social Security numbers, salaries, and taxes withheld. Sunrun notified the FBI, IRS, and state taxing authorities and offered two years of free credit monitoring via Experian's ProtectMyID Alert. The company is reinforcing its information security training to prevent future incidents.