ADT

Disclosed Apr 24, 2026331,536 affectedConfirmed

ADT confirms vishing-led Salesforce breach affecting 5.5 million people

ADT confirmed ShinyHunters voice phished an employee's Okta SSO account and accessed Salesforce data. After a failed extortion attempt the group leaked 11 GB, which Have I Been Pwned tied to 5.5 million people; a small share included partial SSNs or tax IDs.

What is known

People affected	331,536 (as reported by the organization)
Disclosed	Apr 24, 2026
Discovered	Apr 20, 2026
Happened	Apr 20, 2026
Attack	Phishing
Data exposed	NamesSocial Security numbersDates of birthEmailsGovernment IDsPhone numbersAddresses
Sector	Tech · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Official noticeatg.wa.gov

Washington Attorney General breach notice: ADT

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: ADT

Official noticejustice.oregon.gov

Oregon DOJ breach notice: ADT

Aggregatorhaveibeenpwned.com

Have I Been Pwned: ADT

Newsbleepingcomputer.com

ADT confirms data breach after ShinyHunters leak threat

Newsbleepingcomputer.com

Home security giant ADT data breach affects 5.5 million people

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005212: ADT

Notices filed

Residents of DEApr 24

Delaware DOJ1,231 people

TotalApr 24

ResearchCount not stated

Residents of DEApr 24

Delaware DOJ1,231 people

Accounts in the dataApr 27

Have I Been Pwned5,488,888 people

Residents of WAJul 28

Washington AG5,129 people

Residents of ORJul 28

Oregon DOJ331,536 people

Residents of TXJul 28

Texas AG32,546 people

Other breaches at ADT

Second ADT intrusion via partner credentials takes employee account dataVendor breach exposed employment records and credentials and tokens.Vendor breachTechUSOct 7, 2024 Attackers access ADT databases holding customer order informationHacking exposed emails, phone numbers and addresses.HackingTechUSAug 8, 2024

History of this record

source2026-09-25

empty to https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPageby backfillSource

attack2026-09-25

hacking to phishingby seedSource

summary2026-09-25

In April 2026, home security firm ADT confirmed a data breach by ShinyHunters , which listed the company on its website as part of a "pay or leak" extortion attempt. The breach impacted 5.5M unique email addresses along with names, phone nu to ADT confirmed ShinyHunters voice phished an employee's Okta SSO account and accessed Salesforce data. After a failed extortion attempt the group leaked 11 GB, which Have I Been Pwned tied to 5.5 million people; a small share included partiaby seedSource

title2026-09-25

empty to ADT confirms vishing-led Salesforce breach affecting 5.5 million peopleby seedSource

hibp2026-09-25

empty to ADTby backfillSource

sector2026-09-25

other to techby backfillSource

data_types2026-09-25

["names","ssn"] to ["names","ssn","dob","emails","government-id","phone","addresses"]by backfillSource

summary2026-09-25

empty to In April 2026, home security firm ADT confirmed a data breach by ShinyHunters , which listed the company on its website as part of a "pay or leak" extortion attempt. The breach impacted 5.5M unique email addresses along with names, phone nuby backfillSource

data_types2026-09-25

[] to ["names","ssn"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 331536by backfillSource

disclosed2026-09-25

2026-07-28 to 2026-04-24by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about ADT