ADT data breach affects 5.5 million people, ShinyHunters group claims responsibility

The ShinyHunters extortion group has stolen the personal information of 5.5 million individuals from ADT, according to breach-notification service Have I Been Pwned. ADT detected the intrusion on April 20 and confirmed that attackers accessed names, phone numbers, and addresses. In some cases, dates of birth and the last four digits of Social Security numbers or Tax IDs were also exposed. ADT said no payment information or customer security systems were compromised. The cybercrime group has since leaked an 11GB archive of stolen data on its dark web site after failing to extort the company. ShinyHunters told BleepingComputer that it breached ADT by compromising an employee's Okta single sign-on account through a voice phishing attack, then stole data from the company's Salesforce instance. The group has been linked to similar campaigns targeting corporate SSO accounts and connected SaaS applications. ADT, founded in 1874, is the oldest and largest home security company in the United States, serving more than 6 million residential and small-business customers.