Data breach
ADT United States data breach
In 2026, ADT United States suffered a data breach affecting 7,655,289 records. Exposed data included email addresses, phone numbers, addresses and 1 other type of data.
Breach date
7.7 million
Records in the breach
4
Types of data exposed
Were you affected by the ADT United States breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the ADT United States breach
- Email addresses
- Phone numbers
- Addresses
- Financials
About the breach
ADT confirmed a data breach on April 20, 2026, after the ShinyHunters extortion group gained unauthorized access to its corporate systems.
What Happened
• Attack Method: Attackers used voice phishing (vishing) to trick an ADT employee into handing over single sign-on (SSO) credentials, moving laterally into a Salesforce environment.
• Exposed Data: The breach impacted an estimated 5.5 million unique email addresses, names, phone numbers, and physical addresses. A small percentage also exposed dates of birth and the last four digits of Social Security numbers or Tax IDs.
• Unaffected Systems: ADT stated that no financial payment information (credit cards or bank accounts) or customer home alarm/security systems were accessed or compromised.
• South African Operations: Fidelity ADT confirmed that South African customers and systems were completely unaffected, as Fidelity acquired ADT's South African business in 2017.
Response and Legal Actions
• Company Response: ADT terminated the intrusion, launched a forensic investigation with third-party experts, notified law enforcement, and offered complimentary identity protection services to affected individuals.
• Class Action Lawsuit: A proposed class action lawsuit (James v. ADT Inc.) was filed in May 2026 over the massive consumer privacy exposure.
What Happened
• Attack Method: Attackers used voice phishing (vishing) to trick an ADT employee into handing over single sign-on (SSO) credentials, moving laterally into a Salesforce environment.
• Exposed Data: The breach impacted an estimated 5.5 million unique email addresses, names, phone numbers, and physical addresses. A small percentage also exposed dates of birth and the last four digits of Social Security numbers or Tax IDs.
• Unaffected Systems: ADT stated that no financial payment information (credit cards or bank accounts) or customer home alarm/security systems were accessed or compromised.
• South African Operations: Fidelity ADT confirmed that South African customers and systems were completely unaffected, as Fidelity acquired ADT's South African business in 2017.
Response and Legal Actions
• Company Response: ADT terminated the intrusion, launched a forensic investigation with third-party experts, notified law enforcement, and offered complimentary identity protection services to affected individuals.
• Class Action Lawsuit: A proposed class action lawsuit (James v. ADT Inc.) was filed in May 2026 over the massive consumer privacy exposure.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
1. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
2. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
1. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
2. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.