ADT Inc.

ADT's network was reached not through ADT but through a third-party business partner, whose compromised credentials let an unauthorized actor walk in and leave with encrypted internal data on employee accounts. Customer alarm codes were spared this time, though it was ADT's second intrusion in two months. When the trust boundary is drawn to include every partner holding a valid login, the perimeter is only as sound as the weakest vendor's password. ADT named no attacker, and the silence is doing work.