Home security giant ADT data breach affects 5.5 million people

ShinyHunters claimed and published an 11GB dump after breaching ADT via a vishing attack that compromised an employee's Okta SSO account and allowed access to the company's Salesforce instance; Have I Been Pwned analyzed the stolen data and attributed roughly 5.5 million affected individuals with exposed emails, names, phone numbers, addresses and, in a small subset, dates of birth and partial SSN/Tax ID digits. ADT confirmed detecting the intrusion on April 20, said customer security systems and payment data were not accessed, and noted the attackers attempted extortion before leaking the data.