{"id":"adt-customer-data-breach-apr-2026","category":"breach","status":"closed","title":"ADT breach exposes 5.5 million email addresses and customers’ home contact details","tldr":"Stolen ADT customer and prospective customer data included home contact details; HIBP identified 5.5 million email addresses. ADT says alarms and payment information were unaffected. Verify unexpected calls independently and review your credit reports.","summary":"ADT discovered unauthorised access to its cloud environments on 20 April 2026. It confirmed exposure of customer and prospective customer names, phone numbers and addresses, with dates of birth and the last four digits of Social Security numbers or Tax IDs in a small percentage of cases. Have I Been Pwned identified 5.5 million unique email addresses in the breach data; that is not a verified count of individual customers. BleepingComputer reported that ShinyHunters released an 11GB archive after attempting extortion. ADT said it stopped the intrusion, notified affected people and found no access to payment information or customer security systems. A follow-up letter dated 29 June offered eligible recipients 12 months of credit monitoring and fraud assistance, with a 90-day enrolment deadline. Regulatory notifications followed in July. The reviewed sources do not establish recovery of the leaked data or criminal charges by 3 November. There is no customer software patch for this breach.","action":"Verify unexpected calls, texts or emails claiming to be ADT by contacting the company through its official website. Review your credit reports for unfamiliar activity and consider a fraud alert if your identity details were exposed. Ask ADT whether identity support remains available: its June letter required enrolment within 90 days.","product":"ADT customer and prospective customer records","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["adt","data-breach","home-security","personal-data","extortion","shinyhunters"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"ADT detects cybersecurity incident","url":"https://newsroom.adt.com/corporate-news/adt-detects-cybersecurity-incident","by":"ADT","date":"2026-04-24"},{"kind":"advisory","title":"ADT Form 8-K: unauthorised access discovered on April 20","url":"https://www.sec.gov/Archives/edgar/data/1703056/000170305626000038/adt-20260420.htm","by":"ADT","date":"2026-04-24"},{"kind":"advisory","title":"ADT customer notifications and June 29 follow-up letter","url":"https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA42014.pdf","by":"ADT, published by the Washington Attorney General","date":"2026-06-29"},{"kind":"research","title":"ADT Data Breach","url":"https://haveibeenpwned.com/Breach/ADT","by":"Have I Been Pwned","date":"2026-04-27"},{"kind":"news","title":"Home security giant ADT data breach affects 5.5 million people","url":"https://www.bleepingcomputer.com/news/security/home-security-giant-adt-data-breach-affects-55-million-people/","by":"BleepingComputer","date":"2026-04-27"},{"kind":"news","title":"ADT Inc. data breach notices, Jul 27, 2026 to Jul 29, 2026","url":"https://www.acidpeak.com/notices/adt-inc-2026-07-27/","by":"AcidPeak","date":"2026-09-30"}],"started":"2026-04-20","closed":"2026-07-28","created":"2026-11-03T20:15:21.740Z","updated":"2026-11-03T20:15:21.740Z","cve_notes":[],"timeline":[{"at":"2026-07-28","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"AcidPeak's filing index records a Washington breach notification covering 5,129 state residents. The accompanying ADT documents include the June follow-up letter.","url":"https://www.acidpeak.com/notices/adt-inc-2026-07-27/","by":"AcidPeak","patch":null},{"at":"2026-06-29","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"ADT dated a follow-up customer letter offering 12 months of single-bureau credit monitoring and fraud assistance through Cyberscout. Recipients had to enrol within 90 days of the letter.","url":"https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA42014.pdf","by":"ADT, published by the Washington Attorney General","patch":null},{"at":"2026-04-27","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"Have I Been Pwned added the breach, identifying 5.5 million unique email addresses alongside personal contact details. This counts email addresses, rather than establishing the number of individual customers affected.","url":"https://haveibeenpwned.com/Breach/ADT","by":"Have I Been Pwned","patch":null},{"at":"2026-04-27","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"BleepingComputer reported that ShinyHunters had published an 11GB archive of stolen ADT data after an extortion attempt.","url":"https://www.bleepingcomputer.com/news/security/home-security-giant-adt-data-breach-affects-55-million-people/","by":"BleepingComputer","patch":null},{"at":"2026-04-24","added":"2026-11-03T20:12:05.486Z","kind":"disclosed","text":"ADT publicly confirmed the breach and said it had stopped the intrusion and directly notified everyone affected. It said payment information and customer security systems were unaffected.","url":"https://newsroom.adt.com/corporate-news/adt-detects-cybersecurity-incident","by":"ADT","patch":null},{"at":"2026-04-20","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"ADT discovered unauthorised access to cloud environments holding customer and prospective customer data. It began its incident response, engaged investigators and notified law enforcement.","url":"https://www.sec.gov/Archives/edgar/data/1703056/000170305626000038/adt-20260420.htm","by":"ADT","patch":"na"}],"url":"https://hard.fyi/live/adt-customer-data-breach-apr-2026/","json":"https://hard.fyi/api/live?id=adt-customer-data-breach-apr-2026"}