Item 8.01 Other Information.
ADT Inc. (“ADT” or the “Company”) recently experienced a cybersecurity incident during which unauthorized actors illegally accessed certain databases containing ADT customer order information¹,²,³. After becoming aware of the incident, the Company promptly took steps to shut down the unauthorized access and launched an investigation, partnering with leading third-party cybersecurity industry experts⁴. The attackers nonetheless obtained some limited customer information, including email addresses, phone numbers and postal addresses.⁵,⁶
Based on its investigation to date, the Company has no reason to believe that customers’ home security systems were compromised during this incident. Additionally, the Company has no reason to believe the attackers obtained other personally sensitive information such as credit card data or banking information. The Company is continuing its investigation into this cybersecurity incident⁷ and has notified the customers it believes to have been affected, who comprise a small percentage of the Company’s overall subscriber base. While the investigation remains ongoing, as of the date of this filing, the Company believes this cybersecurity incident has not materially impacted its operations and does not expect that this incident is reasonably likely to have a material impact on the Company’s overall financial condition, results of operations, or ability to meet its 2024 financial guidance⁸,⁹,¹⁰,¹¹.
Forward Looking Statements
ADT has made statements in this filing that are forward-looking and therefore subject to risks and uncertainties, including those described below. All statements, other than statements of historical fact, included in this document are, or could be, “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995 and the applicable rules and regulations of the Securities and Exchange Commission (the “SEC”) and are made in reliance on the safe harbor protections provided thereunder. These forward-looking statements relate to, among other things, the impact from the cybersecurity incident, the scope of the investigation and the Company’s plans, objectives, projections and expectations relating to the Company’s operations or financial condition, and assumptions related thereto. Without limiting the generality of the preceding sentences, any time we use the words “expects,” “intends,” “will,” “anticipates,” “believes,” “confident,” “continue,” “propose,” “seeks,” “could,” “may,” “should,” “estimates,” “forecasts,” “might,” “goals,” “objectives,” “targets,” “planned,” “projects,” and, in each case, their negative or other various or comparable terminology, and similar expressions, we intend to clearly express that the information deals with possible future events and is forward-looking in nature. However, the absence of these words or similar expressions does not mean that a statement is not forward-looking. These forward-looking statements are based on management’s current beliefs and assumptions and on information currently available to management. We caution that these statements are subject to risks and uncertainties, many of which are outside of our control and could cause future events or results to be materially different from those stated or implied in this filing, including, among others, the Company’s ongoing assessment of the impacts of the cybersecurity incident; the Company’s expectations regarding its ability to contain and remediate the cybersecurity incident; the impact of the cybersecurity incident on the Company’s relationships with customers, employees and regulators; legal, reputational and financial risks resulting from the cybersecurity incident; and that any future, or still undetected, cybersecurity related incident, whether an attack, disruption, intrusion, denial of service, theft or other breach could result in unauthorized access to, or disclosure of, data, resulting in claims, costs and reputational harm that could negatively affect our actual results of operations or financial condition; and risks that are described in the Company’s Annual Report and its Quarterly Reports on Form 10-Q, including the sections titled “Risk Factors” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations” contained in those reports, and in our other filings with the SEC. Any forward-looking statement made in this filing speaks only as of the date on which it is made. ADT undertakes no obligation to publicly update or revise any forward-looking statement, whether as a result of new information, future developments, or otherwise.