ADT is a publicly traded (NYSE: ADT) home-security and smart-home monitoring company. Its own privacy policy discloses a broad collection footprint typical of an in-home security business — including geolocation, video, and a biometric-information category (fingerprints, faceprints, voiceprints, gait, sleep/health data) — and uses third-party advertising cookies/pixels while honoring Global Privacy Control but not Do Not Track. The policy states ADT does not otherwise sell personal information without consent, though it does share information with third-party service providers, partner companies, authorized dealers, advertisers and insurance companies. ADT's own FY2020 Form 10-K discloses a self-reported 2020 incident in which a former technician added his personal email to roughly 200 customer accounts, giving himself unauthorized access to their in-home systems, which produced several customer lawsuits (including Doty v. ADT LLC); no regulator order was identified. The ADT Control app's App Store privacy label lists Contact Info, Identifiers and Diagnostics as 'Data Linked to You' and declares no 'Data Used to Track You' category.
TRACK RECORD
1 BREACH
[2026-04-20] · BREACH
Have I Been Pwned lists a breach record for ADT: "ADT".
Approximately 5,488,888 accounts affected, per HIBP.
Exposed: Dates of birth, Email addresses, Names, Partial government issued IDs, Phone numbers, Physical addresses.
ADT's privacy policy lists the categories of personal information it collects, including a Biometric Information category covering fingerprints, faceprints, voiceprints, gait and health/sleep data, alongside Geolocation and Video Camera data — a broad footprint reflecting the in-home security product's sensors and account system.
ADT Inc. is a publicly traded company: its Form 10-K cover page lists Common Stock registered under the ticker ADT on the New York Stock Exchange, making its ownership structure traceable via mandatory SEC filings.
ADT's privacy policy states the company does not otherwise sell personal information without consent, while separately disclosing routine sharing of personal information with third-party service providers, partner companies, authorized dealers, advertisers and insurance companies to deliver and support ADT services.
ADT's own FY2020 Form 10-K discloses that in April 2020 the company self-reported a former technician had added his personal email address to roughly 200 customer accounts during service visits, giving himself unauthorized access to their in-home security systems; the disclosure produced several customer lawsuits, including a class action captioned Doty v. ADT LLC in the U.S. District Court for the Southern District of Florida.
Have I Been Pwned's breach catalog lists the "ADT" incident (adt.com), breach date 2026-04-20, affecting approximately 5,488,888 accounts. Data classes exposed per HIBP: Dates of birth, Email addresses, Names, Partial government issued IDs, Phone numbers, Physical addresses. Source: Have I Been Pwned (haveibeenpwned.com), CC BY 4.0.
The ADT Control iOS app's App Store privacy label declares no 'Data Used to Track You' category; it lists Contact Info, Identifiers and Diagnostics as data collected and linked to the user's identity, consistent with the privacy policy's disclosed first-party/vendor analytics rather than cross-app ad tracking.
ADT's privacy policy discloses use of third-party cookies, pixels and web beacons for interest-based advertising and conversion tracking, and states that its websites honor the Global Privacy Control (GPC) opt-out signal but do not respond to browser Do Not Track (DNT) signals.