Almeida Law Group is investigating a data breach at ADT, Inc. The breach occurred on April 20th, 2026 and was discovered on April 20th, 2026. If you were affected, contact Almeida Law Group.
About ADT, Inc.
ADT, Inc. is a leading provider of home and business security solutions, including alarm monitoring systems, smart home devices, surveillance cameras, video doorbells, fire protection systems, and commercial security services. Founded in 1874 and headquartered in Boca Raton, Florida, the company serves more than 6 million customers across the United States and Canada and reports approximately $5.1 billion in annual revenue. It is publicly traded on the NYSE under the ticker symbol ADT. Because ADT’s customer relationships involve in-home service installations and account management, the company collects and stores sensitive personal identifying information for a large customer base, making it an attractive target for data theft.
What Happened?
ADT, Inc. was listed in a Texas Attorney General data security breach report. According to that filing, the incident involved unauthorized access to customer data affecting 331,536 individuals in total. The types of information exposed included names, addresses, dates of birth, and Social Security Number information. ADT notified affected consumers by U.S. mail and email.
ADT detected the unauthorized access on April 20th, 2026, and disclosed the incident to the SEC via Form 8-K on April 24th, 2026. The company stated the breach involved a limited set of customer and prospective customer data — primarily names, phone numbers, addresses, and email addresses, with dates of birth and the last four digits of Social Security numbers or Tax IDs exposed in a smaller percentage of cases. The Texas AG filing additionally lists full Social Security Number information as a compromised data category. ADT confirmed it terminated the unauthorized access, engaged third-party forensic experts, and notified law enforcement. The company stated that no payment information was accessed and that customer home security systems were not affected.
The cybercriminal group ShinyHunters claimed responsibility for the attack on its dark web leak site on April 23rd, 2026, alleging it stole more than 10 million Salesforce records and issuing a pay-or-leak extortion ultimatum with an April 27th deadline. ShinyHunters claimed it gained access by compromising an employee’s Okta single sign-on account through a voice phishing attack, then accessed ADT’s Salesforce instance. ADT has not confirmed the volume of data ShinyHunters claims to have stolen, nor has it confirmed the attacker’s described method. Have I Been Pwned independently cataloged approximately 5.5 million unique email addresses as exposed in this incident.
This breach is notable context given ADT’s recent history: the company disclosed two separate data breach incidents in 2024. In August 2024, a threat actor leaked approximately 30,800 customer records on a hacking forum, which ADT disclosed via SEC Form 8-K. In October 2024, ADT disclosed a second breach caused by compromised credentials from a third-party business partner, which led to exfiltration of encrypted employee data. The April 2026 incident represents at least the third confirmed cybersecurity event in under two years.
At least two class action lawsuits have been filed. The first, Beckwith v. ADT Inc., was filed on or about April 29th, 2026, in the U.S. District Court for the Southern District of Florida, alleging ADT stored customer data unencrypted on internet-accessible networks. The second, James v. ADT Inc., was filed on May 12th, 2026, also in Florida federal court. Commentators have noted the potential for multidistrict litigation consolidation if additional cases are filed nationwide. Law firm Edelson Lechtzin LLP has also announced an investigation into potential class action claims on behalf of affected individuals.
Key Facts at a Glance
- Company or Organization: ADT, Inc.
- Industry: Home Security / Smart Home / Alarm Monitoring
- Location: Boca Raton, Florida
- Incident type: Unauthorized access to customer data
- Date of breach: April 20th, 2026
- Date breach discovered: April 20th, 2026
- Date of consumer notification: July 28th, 2026 (Texas AG report published)
- Total persons affected: 331,536
- Prior breach: Yes — two separate breaches disclosed in 2024 (August and October)
- Litigation status: At least two class action lawsuits filed (Beckwith v. ADT Inc., filed April 29th, 2026; James v. ADT Inc., filed May 12th, 2026); additional law firm investigations announced
- Source: Texas Attorney General data security breach report (BR-0005212); ADT Newsroom; Help Net Security; Have I Been Pwned; Bloomberg Law
What Should You Do?
If you received a notice from ADT, Inc. about this breach, take steps now to protect yourself. Because Social Security numbers, dates of birth, names, and addresses were among the exposed data types, the risk of identity theft is meaningful. Enroll in any identity theft protection service ADT offers if you have not already done so, and note any enrollment deadline stated in your notice. Place a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — to prevent new accounts from being opened in your name. A credit freeze is free and can be lifted temporarily when you need to apply for credit. Review your credit reports for unfamiliar accounts or inquiries at AnnualCreditReport.com, where you are entitled to free weekly reports. Monitor your financial accounts for suspicious activity, and if you find signs of fraud or identity theft, report them at IdentityTheft.gov, which can help you create a personalized recovery plan.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
