ADT Breach Exposes Data of 5.5 Million Customers, ShinyHunters Likely Behind Attack

ShinyHunters claims to have breached ADT by compromising an employee's Okta SSO via vishing, exfiltrating roughly 11 GB of data and publishing about 5.5 million unique emails along with names, addresses, phone numbers and partial SSNs; the breach is presented as part of a wider identity-first, human-led vishing campaign using phishing kits to intercept MFA and extort victims.