Sun Communities, Inc. experienced a data breach that occurred between December 25, 2025, and January 5, 2026. The company discovered the breach on January 6, 2026, and it was primarily caused by social engineering and MFA compromise involving an attacker posing as IT support. Sun Communities states it took action to eliminate the threat, shut down systems, engage forensics, and improve security.
The breach confirmed the exposure of names, addresses, dates of birth, driver's license numbers, passport numbers, national ID numbers, financial account information (including bank account and routing numbers), and Social Security numbers. The Maine Attorney General's office reported 265 individuals affected. Notifications were sent to consumers on February 6, 2026.
Due to the nature of data breaches, additional information may become available over time, and notices may be delayed.