Adobe Creative Cloud is operated by Adobe Inc., a Nasdaq-listed public company (ticker ADBE) whose privacy policy discloses collection of broad categories of personal data — including account, device, geolocation, and, in some contexts, government-ID and health data — and states that user content stored on its servers may be analyzed with machine-learning techniques, with an opt-out available. Adobe's policy and location-specific notices disclose that personal information, including advertising-identifier data generated from cookies and similar technologies, may be shared with resellers, ad networks, and other third parties, and that some of these exchanges may be treated as a data "sale" under certain U.S. state laws. Adobe's regulatory record includes a 2016 multistate attorney-general settlement tied to a 2013 server breach and a 2024 FTC/DOJ complaint alleging deceptive subscription-cancellation practices, while its status as an SEC-reporting public company provides a relatively transparent corporate-ownership record.
TRACK RECORD
1 BREACH
[2013-10-04] · BREACH
Have I Been Pwned lists a breach record for Adobe Creative Cloud: "Adobe".
Approximately 152,445,165 accounts affected, per HIBP.
Adobe's privacy choices page discloses that when customers use Creative Cloud and Document Cloud apps, Adobe may analyze content stored on its servers using machine-learning techniques, with an opt-out available for this content analysis.
Adobe's location-specific privacy notice lists government identification as one of the categories of personal information it collects, alongside professional, demographic, and precise geolocation data.
Adobe Inc.'s SEC Form 10-K filing discloses that its common stock is publicly traded on the Nasdaq Global Select Market under the ticker symbol ADBE, providing a publicly traceable corporate-ownership record subject to SEC reporting requirements.
Adobe's privacy policy states that it applies to the privacy practices of companies Adobe has previously acquired, unless a different notice is specified, indicating how Adobe discloses the scope of its corporate family under a single privacy policy.
Adobe's privacy policy discloses that personal information may be shared with categories of third parties including resellers, advertisers, ad agencies, and advertising networks and platforms.
Adobe's location-specific privacy rights notice acknowledges that under some U.S. state laws, certain data exchanges for marketing purposes with advertising partners may be considered a 'sale' of personal information to a third party.
Have I Been Pwned's breach catalog lists the "Adobe" incident (adobe.com), breach date 2013-10-04, affecting approximately 152,445,165 accounts. Data classes exposed per HIBP: Email addresses, Password hints, Passwords, Usernames. Source: Have I Been Pwned (haveibeenpwned.com), CC BY 4.0.
As assessed by PrivacySpy, Adobe websites use cookies and similar technologies from Adobe Experience Cloud and other companies to measure and improve advertising effectiveness.