ADT said its systems detected unauthorized access to a limited set of customer and prospective customer data on April 20, terminated the intrusion and launched a forensic investigation [1]. According to BleepingComputer, HIBP says ShinyHunters stole personal data of 5.5 million people; ADT said the data was limited to names, phone numbers and addresses, with birth dates and last four digits of SSNs or tax IDs in a small share of cases [2]. ADT has directly notified all impacted individuals and will offer complimentary identity protection as appropriate; recipients can enroll per their notice [1].
US home security firm ADT customer data stolen by ShinyHunters, about 5.5 million people affected
1 min read
- Disclosed
- Apr 24, 2026
- Occurred
- Apr 20, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 5,500,000 people[2]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Professional services
What to do nowOur advice
- If notified by ADT, enroll in the complimentary identity protection offered in the notice [1].
Timeline
Technical details
Remediation
Vendor guidance
- 1Enroll in identity protection mitigate[1]
Enroll in the complimentary identity protection ADT offers in its notice.
References
Official / primary1
- [1]ADT2026-04-24Accessed 2026-11-11Snapshot 2026-11-11 sha256 285f8a9d696b
“ADT has directly notified all impacted individuals and will offer complimentary identity protection services as appropriate.”
Media1
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.