ADT, Inc. (adt.com) Listed by shinyhunters Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

What happened

The incident came to public notice through a listing posted by shinyhunters on April 24, 2026. The post describes a ransomware operation in which internal files were removed from ADT systems and sets a deadline of April 27, 2026, for contact. No independent confirmation of the volume or contents of the material has been released by the company. Details such as the date the files were first accessed or the precise method of entry remain undisclosed.

The group behind it: shinyhunters

Shinyhunters is a ransomware group that has conducted multiple extortion campaigns against organizations in various sectors. The group typically claims to have stolen data during ransomware intrusions and then uses public listings to pressure victims into payment. It has previously listed companies across technology, retail, and service industries. In this case the group presents the ADT listing as a final notice before further distribution of the claimed material.

Who is ADT, Inc. (adt.com)?

ADT, Inc. provides electronic security, fire detection, and home-automation services to residential and commercial customers. Its systems collect and store customer account information, installation records, and operational data necessary to deliver monitoring and response services. A compromise at a company that holds security-related records can affect both customer privacy and the integrity of systems designed to protect physical premises.

What was likely exposed

The listing states that internal files containing personally identifiable information and additional corporate data were taken. The exact categories of information, the number of unique individuals involved, and whether customer alarm records or payment details are present have not been verified. Organizations of this type routinely hold names, addresses, contact details, account numbers, and service histories, but the specific contents of the claimed exfiltration remain unconfirmed.

The real-world impact

Individuals whose information appears in the material could face risks of identity misuse or targeted fraud. For the company, the listing raises questions about the security of systems that manage both customer data and physical-security infrastructure. At present there is no public information on whether the claimed data has been distributed beyond the initial listing or used in further incidents.

What to do if you're exposed

Review account statements and credit reports for unusual activity. Enable multi-factor authentication on any accounts that may be linked to the affected organization and consider a credit freeze if personal financial details are involved. Readers can run a free exposure scan of their email address against known breach data to determine whether their information has appeared in previously published listings.

AICompiled with AI assistance from public sources and published under our editorial standards.