ADT confirms data breach after ShinyHunters threatens data leak

Home security provider ADT has confirmed a data breach following threats from the ShinyHunters extortion group to leak stolen customer information. The company detected unauthorized access on April 20, leading to an investigation that confirmed personal data was compromised, according to a recent report by Bleeping Computer.

The breach affected customer and prospective customer data, including names, phone numbers, and addresses. In a subset of cases, dates of birth and the last four digits of Social Security numbers or Tax IDs were also accessed. ADT stated that no payment information or security systems were compromised.

ShinyHunters claimed to have stolen over 10 million records and alleged the breach occurred via a voice phishing attack that compromised an employee's Okta single sign-on account, granting access to the company's Salesforce instance. This follows previous data breaches disclosed by ADT in August and October 2024.

Source: Bleeping Computer