Home security company ADT experienced a data breach affecting 5.5 million individuals, with the ShinyHunters extortion group stealing personal information including names, phone numbers, and addresses. ADT confirmed the breach was detected on April 20, 2026, but stated that no payment information was compromised.
The recent ADT data breach highlights the critical vulnerability in identity management systems, as attackers compromised an employee's Okta SSO account through voice phishing. This incident underscores the necessity for robust multi-factor authentication and employee training to mitigate social engineering threats, especially for companies using widespread SaaS applications.