Have I Been Pwned: ShinyHunters' breach of ADT exposed the personal data of 5.5M people; ADT previously disclosed data breaches in August 2024 and October 2024 (Sergiu Gatlan/BleepingComputer)

ADT has suffered its third major data breach in 2024, with ShinyHunters exposing personal data of 5.5 million customers, creating significant liability and regulatory exposure for the company and raising critical questions about the security practices of critical infrastructure providers. This pattern of repeated breaches within a single year signals systemic security failures that should prompt IT leaders to reassess vendor risk management protocols and the adequacy of security controls at companies managing sensitive customer data and physical security systems. CIOs must now evaluate whether their organizations' integrations with compromised vendors like ADT require immediate security audits, incident response planning, and potential vendor diversification strategies.