Adobe Analytics is a web/app analytics product within Adobe Experience Cloud, offered by Adobe Inc. (NASDAQ: ADBE), a publicly traded Delaware corporation. Adobe's own FY2025 Form 10-K describes the product as collecting, organizing and structuring data 'from virtually any channel, including streaming web data' using AI/machine learning. Adobe's technical documentation states the product assigns a persistent visitor identifier (the ECID) shared across Adobe Analytics, Audience Manager and Target, and that 'server-side forwarding' pushes Analytics data to Audience Manager (an ad/audience platform) in real time by default, with customers able to flag pre-consent hits to exclude them from that forwarding. The 10-K's risk-factor section generically acknowledges the company 'has experienced... impacts to our revenue and reputation' from past security incidents without naming a specific breach, and discloses an unrelated, unresolved DOJ/FTC civil complaint (filed June 2024, motion to dismiss denied May 2025) concerning subscription-cancellation disclosure practices under ROSCA — a corporate-level legal matter not specific to Analytics data handling. No breach, audit, or regulator action specific to Adobe Analytics's data-collection or tracking practices was found in this research.
TRACK RECORD
1 BREACH
[2013-10-04] · BREACH
Have I Been Pwned lists a breach record for Adobe Analytics: "Adobe".
Approximately 152,445,165 accounts affected, per HIBP.
Adobe Inc.'s FY2025 Form 10-K describes Adobe Analytics as collecting, organizing and structuring data from virtually any channel, including streaming web data, using AI and machine learning to deliver real-time insights to customers.
The same GDPR/server-side-forwarding documentation states that Adobe Analytics customers, as data controllers, can restrict pre-consent data collected by Adobe Analytics from being forwarded downstream by flagging hits with a consent context variable, indicating collection itself continues by default (the restriction is applied at the point of onward transfer, not at initial collection) unless the customer implements this control.
Adobe Inc.'s FY2025 Form 10-K states the company is incorporated in Delaware and that its common stock is registered and trades on the Nasdaq Global Select Market under the symbol 'ADBE'; the same filing lists Adobe Analytics as one of the company's own product offerings, not a separate legal entity.
Adobe Analytics's GDPR/ePrivacy documentation states that server-side forwarding shares data from Adobe Analytics to other Experience Cloud solutions such as Audience Manager in real time by default, and that as of November 1, 2018 customers (as data controllers) have the option to restrict pre-consent data from being forwarded to Adobe Audience Manager by flagging hits with a context variable, indicating the default sharing behavior can be scoped by consent status but is not opt-in absent that configuration.
Adobe's 10-K risk-factor disclosures generically acknowledge that the company 'has experienced, and may in the future experience, impacts to our revenue and reputation' from security incidents, without naming a specific breach; the same filing separately discloses an unresolved DOJ/FTC civil complaint (filed June 17, 2024, motion to dismiss denied May 2, 2025) alleging inadequate disclosure of subscription-cancellation terms under ROSCA — a corporate legal matter concerning billing practices, not data privacy or tracking.
Adobe's Visitor ID Service documentation states the service assigns a unique, persistent identifier called the ECID to site visitors, and that the ECID is a shared identity namespace used across Adobe Experience Platform and Adobe CX Enterprise applications — explicitly including Adobe Analytics, Audience Manager and Target — to identify people and devices.