shinyhunters ransomware group lists ADT, Inc. (adt.com) on its leak site

• Ransomware group: shinyhunters
• Country: United States
• Sector: Professional Services
• Announcement date: April 24, 2026

Shinyhunters claims attack on ADT, Inc.

The ransomware group known as shinyhunters has officially listed ADT, Inc. on its leak site. This announcement, published on April 24, 2026, marks a significant escalation in the group's activities against the professional services sector. According to the claims made by the threat actor, the organization is currently facing a data breach involving sensitive information.

The group has issued a deadline to the organization, stating that if ADT, Inc. does not reach out to them by April 27, 2026, the stolen data will be released publicly. This tactic is a hallmark of modern ransomware operations, where attackers use the threat of exposure to force compliance. At this time, public information regarding the specific identity and background of the shinyhunters group remains limited.

Details of the alleged data breach

The announcement made by shinyhunters includes specific claims regarding the volume and nature of the compromised information. The group asserts that they have successfully exfiltrated a massive amount of data, claiming that over 10 million records have been compromised. These records are said to include both personally identifiable information (PII) and internal corporate data.

Despite the significant scale of the alleged breach, the group has not provided any screenshots to verify the authenticity of the stolen files. Furthermore, no specific details regarding the exact file count, the total size of the data, or the specific ransom demand have been disclosed in the announcement. The affected data types mentioned in the claim include:

• Personally identifiable information (PII)
• Corporate data

About ADT, Inc.

ADT, Inc. is a leading security company based in the United States. The organization provides a wide range of essential security services, including security systems, alarm monitoring, and smart home automation solutions. Their services are designed to cater to both residential and business customers, making them a significant entity within the professional services sector.

Risk assessment and industry implications

The claims made by shinyhunters suggest a high-pressure scenario for ADT, Inc., utilizing what is known as double extortion tactics. In these scenarios, threat actors do not merely encrypt systems to disrupt operations; they also steal sensitive data to blackmail the organization with the threat of public disclosure. This approach is designed to maximize the pressure on an organization to pay a ransom.

The potential consequences of such a breach are multifaceted. For the individuals involved, the compromise of personally identifiable information can lead to secondary risks such as identity theft or fraud. For the organization itself, a breach of this magnitude can lead to significant operational disruptions and may impact the security of the broader supply chain. Furthermore, as a United States-based entity, ADT, Inc. may face legal consequences under federal regulations and various state privacy laws due to the nature of the data involved.

The scale of the alleged data volume presents a substantial challenge for the organization's reputation management. When a company handles sensitive security and automation data, maintaining public trust is paramount. Organizations in this sector often face increased scrutiny following such incidents. To mitigate these risks, companies typically focus on robust data encryption, strict access controls, and comprehensive monitoring to detect unauthorized exfiltration. Managing the fallout of a large-scale leak requires coordinated responses to address both legal obligations and the protection of customer and employee privacy.