Burglar alarm biz burgled: ADT confirms cyber intrusion after ShinyHunters extortion attempt

ADT detected unauthorized access on April 20, engaged external incident responders and law enforcement, and disclosed that attackers accessed certain cloud-based environments and a limited set of customer data (names, phone numbers, addresses, some dates of birth and last four digits of SSN/tax IDs). Threat group ShinyHunters claims to have stolen "over 10M Salesforce records" and posted on a dark web leak site after failed extortion negotiations; HaveIBeenPwned reports 5.5 million unique email addresses associated with the incident, highlighting disagreement over the breach scale.