The ADT, Inc. data breach: your legal rights
ADT, Inc. told the Oregon Attorney General that people’s personal information was exposed. If you got a notice, these are the rights you have.
Get a free case reviewYour rights after this breach
To be told about the breach
Oregon law requires a company that loses residents' personal information to notify them. ADT, Inc. reported this breach to the Oregon Attorney General.
Oregon data breach notification law
To ask whether you can recover money
If ADT, Inc. did not take reasonable care of your information, you may have a claim for negligence or under Oregon law. An attorney can review it with you for free.
Oregon common law and consumer protection statutes
Free case review
Tell us you got the ADT, Inc. notice. An attorney reviews it and tells you plainly whether you may have a claim.
- Free, no obligation
- No fee unless you recover
- Reply within 24 hours
What ADT, Inc. reported
- Reported to
- Oregon Attorney General
- Date filed
- July 28, 2026
- People notified
- Not stated
- Cause in filing
- Not stated
ADT, Inc. is a premier, industry-leading provider of security, automation, and smart-home solutions, servicing millions of residential and commercial properties nationwide. Because the company designs, installs, and monitors sophisticated electronic security systems, intrusion alarms, video surveillance, and access control infrastructure, it collects and retains a vast repository of highly sensitive consumer and structural data. This includes not only customer names, physical addresses, billing details, and contact information, but also detailed blueprints, entry point access codes, smart device configurations, and real-time operational status logs. The nature of ADT's business requires maintaining deep trust with its customer base, as clients rely on the company to safeguard their physical homes, families, and businesses from intrusion and harm. In 2026, ADT reported a significant data security incident to the Oregon Attorney General, raising serious concerns among consumers regarding the safety of their confidential information. While exact technical forensics continue to be evaluated, incidents affecting security and smart-home technology providers typically involve sophisticated unauthorized access to centralized customer databases, exploitation of vulnerable cloud storage environments, or third-party vendor compromises. Because companies in this sector maintain persistent digital connections to active alarm panels and monitoring networks, attackers often target these access vectors to harvest valuable account credentials, personal identifiers, and infrastructural layouts that can be leveraged for subsequent cybercrimes or physical security breaches. Information exposed in a security breach of this magnitude often includes full legal names, home addresses, phone numbers, email addresses, encrypted account passwords, billing records, and, in many cases, specific details regarding home security system layouts and access credentials. The compromise of this data presents severe and multifaceted risks to affected individuals. When home addresses and security system configurations are paired with personal contact information and credential data, victims face heightened threats not only of traditional financial fraud, identity theft, and account takeover, but also alarming risks to their physical safety and residential privacy. Unauthorized actors possessing such insider details could potentially disable monitoring capabilities, bypass physical security measures, or target households for targeted burglaries and extortion. As a commercial entity entrusted with sensitive consumer data and the operational security of private residences, ADT is bound by strict legal obligations under state consumer protection statutes, the Federal Trade Commission Act, and applicable data privacy laws. These legal frameworks mandate that companies implement robust, industry-standard administrative, technical, and physical safeguards—such as multi-factor authentication, rigorous encryption standards, continuous network monitoring, and routine vulnerability assessments—to protect consumer information from unauthorized disclosure. The occurrence of a data breach strongly suggests a potential failure in these security protocols, indicating that the company may have fallen short of its legal duty to maintain reasonable and appropriate data security measures. Receiving a formal data notification letter from ADT serves as a legal acknowledgement that your confidential information was compromised due to inadequate corporate security practices. Under consumer protection laws, affected individuals possess the legal right to take action and participate in class action litigation aimed at holding the company accountable for failing to safeguard their private details. Importantly, victims do not need to prove immediate financial loss or identity theft to qualify for participation in a class action lawsuit; the exposure of your private data alone creates legal standing. Our law firm handles data breach cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only recover fees if we successfully secure a financial recovery or settlement on your behalf.
ADT, Inc. data breach questions
- Is the ADT, Inc. data breach letter legit or a scam?
- A notice from ADT, Inc. in the mail matches the breach ADT, Inc. reported to the Oregon Attorney General on July 28, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact ADT, Inc. through a phone number or website you find yourself.
- Did ADT, Inc. offer free credit monitoring?
- Look for an enrollment code in your ADT, Inc. notice. Companies that offer free credit monitoring after a breach usually include it there, with a deadline to activate. Enrolling does not give up your right to bring a claim.
- Is there a ADT, Inc. data breach class action lawsuit?
- Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against ADT, Inc.. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
- What should I do after getting the ADT, Inc. data breach notice?
- Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
- Do I need a ADT, Inc. data breach lawyer or attorney?
- An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
- Can I sue ADT, Inc. over the data breach?
- It depends on what was exposed, the law in Oregon and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
- How much could a ADT, Inc. data breach settlement or claim be worth?
- There is no set amount, and no ADT, Inc. settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. Keep receipts and records; they're what damages claims are built on.
Other breaches reported in Oregon
- Photon HealthOregon Attorney General · Filed October 21, 2026Count not stated
- Aldrich Services LLPOregon Attorney General · Filed October 21, 2026Count not stated
- Roseburg Therapy dba Stronger OregonOregon Attorney General · Filed October 19, 2026Count not stated
- The City of Mt. AngelOregon Attorney General · Filed October 13, 2026Count not stated
- Mercadien P.C., CPAsOregon Attorney General · Filed October 12, 2026Count not stated
- Blueberry PediatricsOregon Attorney General · Filed October 10, 2026Count not stated
Attorney advertising. General information, not legal advice for your situation. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.