ADT Confirms Breach of 5.5 Million Customers Data

Home security company ADT confirmed a data breach on April 20 that exposed personal information belonging to 5.5 million customers and prospective customers, according to the data breach tracking service Have I Been Pwned. The intrusion, attributed to the hacking group ShinyHunters, targeted the company's Salesforce systems after hackers compromised an employee's Okta single sign-on credentials through a voice phishing attack.

ADT detected the unauthorized access that day and immediately terminated it, activating response protocols that included a forensic investigation with third-party cybersecurity experts and notifications to law enforcement. The company stated that the breach affected a limited set of data, primarily customer names, phone numbers, and addresses. In a small percentage of cases, dates of birth and the last four digits of Social Security numbers or Tax IDs were also included. No payment information, such as credit card details or bank account numbers, was compromised, and customer security systems remained unaffected.

ShinyHunters claimed responsibility on its dark web leak site, asserting it stole more than 10 million records, including internal corporate...