Breaches and incidentsBriefReported by a reputable outlet, citing the company
ADT: customer and prospect data stolen after claimed Okta vishing
ADT detected unauthorized access on 20 Apr 2026 and said “the information involved was limited to names, phone numbers, and addresses”, with dates of birth...
- Disclosed
What happened
- ADT detected unauthorized access on 20 Apr 2026 and said “the information involved was limited to names, phone numbers, and addresses”, with dates of birth and the last four digits of SSN or Tax ID in a small share of cases; no payment data, and security systems unaffected. HIBP counted 5.5 million unique emails; ShinyHunters claims 10 million records.
- Root cause as claimed by ShinyHunters: vishing of an employee’s Okta SSO account, then ADT’s Salesforce instance. ADT has not confirmed.
- ShinyHunters claimed it with a 27 Apr deadline.
- ADT says it contacted those affected; this is at least ADT’s third breach since Oct 2024.
Sources
- https://bleepingcomputer.com/news/security/adt-confirms-data-breach-after-shinyhunters-leak-threat
- https://www.govinfosecurity.com/home-security-firm-adt-breach-55m-customers-data-exposed-a-31511
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.