ADT Details

    Organization Logo

    ADT

    Boca Raton, Florida • 20000 employees • Technology

    United States

    Industry

    Technology

    Security Incidents

    2

    ADT Inc., formerly The ADT Corporation, is an American security company that provides residential and small business electronic security, fire protection, and other related alarm monitoring services throughout the United States. The corporate head office is located in Boca Raton, Florida

    Security Incidents

    ADT Breach of Aug 2024
    Severity Score
    Significant to High

    Type

    Data Breach

    Summary

    On August 1, 2024, ADT, a well-known security firm, confirmed a data breach orchestrated by a dark web actor called “netnsher”. The intrusion compromised over 30,812 records containing sensitive customer details, including about 30,400 unique email addresses, physical addresses, user IDs, and purchase histories. The threat actor released this data along with a sample to substantiate the breach.

    The breach followed a previous incident reported on July 8, 2024, by another actor, “Abu_Al_Sahrif”, who leaked internal ADT documents from 2020 to 2023. It remains unclear whether netnsher’s breach u...
    Show more

    Severity

    The ADT data breach, attributed to the dark web actor "netnsher," compromised over 30,812 records, with around 30,400 unique email addresses affected. The exposed data included emails, physical addresses, user IDs, and purchase history, providing a treasure trove of sensitive information for potential exploitation by malicious actors. Given the nature and volume of the data leaked, this incident stands at an 8 on the severity scale, indicating a "Significant to High" level of impact.

    Impact

    The ADT data breach, claimed by the dark web actor "netnsher," exposed over 30,812 records, including around 30,400 unique email addresses. The compromised data included emails, physical addresses, user IDs, and purchase history, all of which are highly sensitive and valuable to malicious actors.
    ADT Breach of Oct 2024
    Severity Score
    Significant to High

    Type

    3rd Party Compromise

    Summary

    In early October 2024, ADT, a well-known American security and smart home solutions provider, disclosed a security breach stemming from unauthorized access through stolen credentials. The credentials, reportedly obtained from a third-party business partner, allowed attackers to access ADT's systems and exfiltrate encrypted employee account data. In response, ADT immediately terminated the access, enlisted third-party cybersecurity experts to investigate, and informed federal law enforcement.

    Despite the breach, ADT maintains that there is no evidence of compromise to customer data or security...
    Show more

    Severity

    The recent cybersecurity incidents at ADT involved two significant breaches over a short period of two months. In the latest breach, attackers accessed ADT’s systems by exploiting stolen credentials from a third-party partner, compromising encrypted employee account data. Although the attack did not affect customer data, it resulted in noticeable disruptions to ADT’s internal operations due to containment and investigation efforts, underlining potential weaknesses in supply chain security.

    Considering that this breach followed a previous one where customer data was exposed, and given ADT's ro...
    Show more

    Impact

    The recent cyber incident at ADT was primarily a data breach, where threat actors accessed the company's systems using compromised credentials from a third-party business partner. The attackers exfiltrated encrypted internal employee account data; however, there is no evidence to suggest that customer data or security systems were impacted. ADT's swift response included shutting down unauthorized access, collaborating with cybersecurity experts, and reinforcing its systems, which caused some temporary disruptions to its internal applications and business operations.

    This was ADT’s second brea...
    Show more

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos