DisclosureLens
HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDHighContained

ADT Inc.

bd_7c187a828ecd7988 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 20, 2026

Filed

Jul 28, 2026

To disclose

14 weeks

Affected

5,129state residents only

Linked

8 filings

Confidence

70%
Full breach record for ADT Inc.4 incidents on file

ADT, Inc. reported unauthorized access to customer and prospective customer data in Washington on April 20, 2026. The breach affected 5,129 Washington residents. Compromised data included names, phone numbers, addresses, dates of birth, and the last four digits of Social Security numbers. No credit card or banking information was accessed. ADT terminated the intrusion, engaged forensic experts, notified law enforcement, and offered 12 months of credit monitoring.

Washington clock WA AG >90d14 weeks discovery → filing
occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 weeks / 99 days

Apr 20, 2026

Begins

Apr 20, 2026

Discovered

Jul 28, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 8 about the same incident.View merged incident
A leak claim by shinyhunters about this victim predates this filing by 94 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 95d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Delaware State AGApr 24 · first
Washington State AG+95d · this page

Pattern: first filing Apr 24 (DE), last Jul 29 (NH) — a 96-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.