ADT confirms data breach after ShinyHunters leak threat

ADT confirmed unauthorized access to customer and prospective-customer data after an alleged ShinyHunters vishing attack compromised an employee's Okta SSO and allowed access to Salesforce; the group claims over 10 million records and is extorting the company. ADT said the exposed data was primarily names, phone numbers, and addresses, with a small portion including dates of birth and last four digits of SSNs/Tax IDs, and stated no payment information or customer security systems were compromised.