SUNRUN INC.
ent_019ec8451bd44f959acb23526e027afe
Disclosures
3
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
139
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- SUNRUN INC.
- Normalized
- sunrun— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 54930007SJ77CI66U531
- SEC EDGAR CIK
- 0001469367
- Domain
- None on record
Disclosure history (3)newest first
- California State AGas victim2017-02-02
On January 20, 2017, Sunrun Inc. experienced a targeted phishing scam where a scammer impersonated the CEO to request employee W-2s from the payroll department. The phishing email was not recognized as a scam, resulting in the external disclosure of 2016 W-2s for current and former employees. Affected data included names, addresses, Social Security numbers, salaries, and taxes withheld. Sunrun notified the FBI, IRS, and state taxing authorities and offered two years of free credit monitoring via Experian's ProtectMyID Alert. The company is reinforcing its information security training to prevent future incidents.
- Massachusetts State AGas victim2017-02-02
Sunrun, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-02-02. 139 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2017-02-02
Sunrun Inc. disclosed a targeted spear-phishing incident where an employee in the payroll department was tricked into disclosing 2016 W-2 forms for current and former employees. The compromised data included names, addresses, Social Security numbers, salaries, and taxes withheld. Sunrun notified the FBI, IRS, and state authorities, and offered two years of credit monitoring to affected individuals. 36 New Hampshire residents were notified via mail.