ADT confirmed a data breach after the ShinyHunters group threatened to leak 10 million records. The attack involved a vishing campaign to compromise an employee's Okta SSO account, leading to data theft from Salesforce, including names, phone numbers, addresses, and some dates of birth/SSN last four digits.
Initial Access
Vishing for Access
confirmed
The ShinyHunters group initiated the attack with a voice phishing (vishing) campaign targeting an ADT employee.
Defender cut points
Implement robust security awareness training specifically for vishing attacksEnforce strict verification protocols for employee identity during phone calls
