Cyber incident at ADT (NYSE: ADT) involves limited data exposure

Rhea-AI Filing Summary

ADT Inc. reported that on April 20, 2026 it became aware of unauthorized access to certain cloud-based environments. The company quickly terminated the access, activated its incident response plan, began an investigation with third-party cybersecurity experts, and notified law enforcement.

After following its incident response plan, ADT determined that only limited customer and prospective customer data was accessed. Based on information currently available, ADT does not believe the incident is reasonably likely to have a material impact on its financial condition, results of operations, or ongoing business operations, though it continues to assess the scope and impact.

Insights

Cyber and risk analyst

ADT reports limited data access incident it does not expect to be financially material.

ADT Inc. detected unauthorized access to certain cloud-based environments on April 20, 2026. The company states it promptly terminated access, activated its incident response plan, engaged third-party cybersecurity experts, and informed law enforcement, indicating a structured response process.

Following its investigation, ADT concluded that only limited customer and prospective customer data was accessed and that, based on current information, the incident is not reasonably likely to have a material impact on its financial condition, results of operations, or ongoing operations. This language signals the company currently views the financial and operational risk as contained.

ADT notes that it continues to assess the scope and impact of the incident, so future disclosures could refine its understanding. For now, the described response and the company’s own materiality assessment frame this as a manageable cybersecurity event rather than a transformative development.

8-K Event Classification

Item 8.01 — Other Events

1 item

Item 8.01 Other Events Other

Voluntary disclosure of events the company deems important to shareholders but not covered by other items.

Key Figures

Incident awareness date: April 20, 2026 Incident response reference period: Year ended December 31, 2025

2 metrics

Incident awareness date April 20, 2026 Date ADT became aware of unauthorized access

Incident response reference period Year ended December 31, 2025 Incident response plan described in Form 10-K for this period

Key Terms

cloud-based environments, incident response plan, third-party cybersecurity experts, material impact

4 terms

cloud-based environments technical

"became aware of unauthorized access to certain cloud-based environments"

incident response plan technical

"activated its incident response plan (the “IRP”)"

third-party cybersecurity experts technical

"launched an investigation and engaged third-party cybersecurity experts"

material impact financial

"does not believe that this incident is reasonably likely to have a material impact"

Material impact refers to a significant effect that can influence the overall value, decision-making, or outlook of a business or investment. It matters to investors because such an impact can change the expected success or risk level of an investment, similar to how a major change in a recipe can alter the final taste—it's important enough to influence overall judgment or actions.

Understanding 8-K Material Events →

FALSE000170305600017030562026-04-202026-04-20

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 8-K

CURRENT REPORT

Pursuant to Section 13 OR 15(d) of The Securities Exchange Act of 1934

 Date of Report (Date of earliest event reported): April 20, 2026

ADT Inc.

(Exact name of registrant as specified in its charter)

Delaware			001-38352			47-4116383
(State or other jurisdiction of incorporation)			(Commission File Number)			(IRS Employer Identification No.)

1501 Yamato Road

Boca Raton, Florida 33431

(Address of principal executive offices)

(561) 988-3600

(Registrant’s telephone number, including area code)

(Former name or former address, if changed since last report.)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions:

☐ Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)

☐ Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

☐ Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

☐ Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act:

Title of each class

Trading Symbol(s)

Name of each exchange on which registered

Common Stock, par value $0.01 per share

ADT

New York Stock Exchange

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (17 CFR §230.405) or Rule 12b-2 of the Securities Exchange Act of 1934 (17 CFR §240.12b-2). Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. o

Item 8.01 Other Information.

On April 20, 2026, ADT Inc. (“ADT” or the “Company”) became aware of unauthorized access to certain cloud-based environments. The Company promptly took steps to terminate the unauthorized access, activated its incident response plan (the “IRP”) as described in Item 1C of its Annual Report on Form 10-K for the year ended December 31, 2025, launched an investigation and engaged third-party cybersecurity experts, and notified law enforcement.

Following the investigation conducted in accordance with its IRP, the Company determined that only limited customer and prospective customer data was accessed. Based on information currently available and following the processes laid out in its IRP, the Company does not believe that this incident is reasonably likely to have a material impact on the Company’s financial condition, results of operations, or ongoing business operations. The Company continues to assess the scope and impact of the incident.

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.

Date:			April 24, 2026			ADT Inc.
						By:			/s/ Jeffrey Likosar
									Jeffrey Likosar
									President, Corporate Development and Transformation, and Chief Financial Officer

FAQ

What cybersecurity incident did ADT (ADT) disclose in this 8-K filing?

ADT disclosed that on April 20, 2026 it became aware of unauthorized access to certain cloud-based environments. The company terminated the access, activated its incident response plan, launched an investigation with third-party cybersecurity experts, and notified law enforcement about the incident.

What type of data was accessed in ADT’s April 2026 cyber incident?

Following its investigation under the incident response plan, ADT determined that only limited customer and prospective customer data was accessed. The filing does not detail specific data elements but emphasizes that the scope of accessed information was described as limited by the company.

Does ADT expect the cyber incident to have a material financial impact?

Based on information currently available, ADT states it does not believe the incident is reasonably likely to have a material impact on its financial condition, results of operations, or ongoing business operations. This assessment reflects the company’s conclusion after following its incident response processes.

How did ADT respond operationally after discovering the unauthorized access?

ADT promptly terminated the unauthorized access, activated its incident response plan, launched an investigation, engaged third-party cybersecurity experts, and notified law enforcement. These actions followed the processes described in its incident response plan referenced in its Annual Report on Form 10-K for 2025.

Is ADT still investigating the April 2026 cybersecurity incident?

ADT indicates that it continues to assess the scope and impact of the incident. Although it currently does not expect a material impact on financial condition or operations, the ongoing assessment may refine the company’s understanding of the event’s full implications over time.

Filing Exhibits & Attachments

3 documents

Other Documents

• EX-101 XBRL TAXONOMY EXTENSION SCHEMA DOCUMENT 1.7 KB
• EX-101 XBRL TAXONOMY EXTENSION LABEL LINKBASE DOCUMENT 21.1 KB
• EX-101 XBRL TAXONOMY EXTENSION PRESENTATION LINKBASE DOCUMENT 12.2 KB