ADT Confirms Data Breach Following ShinyHunters Data Leak Claim

ADT disclosed unauthorized access to cloud-based environments after ShinyHunters claimed to have exfiltrated over 10 million customer and prospective customer records (names, phone numbers, addresses, and in some cases DOB and last four of SSN/Tax ID) via a vishing-led Okta SSO compromise that accessed their Salesforce instance; ADT terminated access, activated its incident response plan, engaged third-party forensics, notified affected individuals, and reported no financial account compromise or impact to home security systems.