ADT Data Breach Exposes Information of 5.5 Million Individuals

Post Views: 6

ADT Corporation Data Breach Exposes Information of 5.5 Million Individuals

According to an investigation conducted by ADT, the breach was facilitated by an employee’s compromised Okta single sign-on (SSO) account, which was obtained through a voice phishing attack. The attackers used this account to gain access to ADT’s Salesforce instance and extract sensitive data. ShinyHunters has been linked to numerous high-profile attacks in recent months, including breaches at Medtronic and the European Commission.

Scope of the Breach

The stolen data includes unique addresses, names, dates of birth, phone numbers, physical addresses, and partial government-issued IDs, according to Have I Been Pwned, a popular data breach notification service. This analysis revealed that the breach affected 5.5 million individuals, who should remain vigilant and monitor their accounts for suspicious activity.

Impact on Affected Individuals

ADT emphasized that customer security systems were not compromised or affected during the breach and that no payment information, including bank accounts or credit card details, was accessed. However, the company acknowledged that the breach did expose sensitive information, and affected individuals should remain vigilant and monitor their accounts for suspicious activity.

ShinyHunters Tactics

ShinyHunters’ tactics involve targeting employees’ and business process outsourcing (BPO) agents’ Microsoft Entra, Okta, and Google SSO accounts through voice phishing attacks. Once compromised, these accounts are used to steal data from connected software-as-a-service (SaaS) applications, including Salesforce, Microsoft 365, Google Workspace, SAP, Slack, Adobe, Atlassian, Zendesk, Dropbox, and others.

Conclusion

This incident serves as a reminder of the importance of robust cybersecurity measures and the potential consequences of neglecting to prioritize employee education and awareness programs. As the number of high-profile data breaches continues to rise, organizations must take proactive steps to safeguard against these threats and protect sensitive information.