ADT Data Breach Exposes Sensitive Personal Information of 331k People

ADT Inc., an American home security company serving more than six million customers, disclosed a data breach that occurred on or about April 20, 2026.

ADT described the incident as unauthorized access to certain cloud-based environments.

On April 23, 2026, ShinyHunters posted about the stolen data on the dark web, claiming to have taken more than 10 million Salesforce records containing personally identifiable information and other corporate data. After ADT did not reach an agreement with the group, ShinyHunters leaked an 11 GB archive of stolen data on its dark web leak site, according to Bleeping Computer.

The exposed information types included names, addresses, Social Security numbers, dates of birth, phone numbers and tax IDs. ADT confirms that no payment information, including bank accounts or credit cards were exposed.

A total of 331,536 individuals across the United States were impacted, including 32,546 Texas residents, 5,129 Washington residents, 4,540 Massachusetts residents and 702 New Hampshire residents. The company posted a security notice on its website and disclosed the incident to the Securities and Exchange Commission.

ADT's response to the breach

ADT is offering affected individuals 12 months of complimentary single bureau credit monitoring, credit report and credit score services.

Affected individuals can enroll by visiting the Cyberscout activation page and entering the unique code included in their notice letter. Enrollment must be completed within 90 days of the letter date.

ADT is also providing proactive fraud assistance through Cyberscout to help affected individuals with questions or in the event they become victims of fraud.