ADT Technician Added His Personal Email Address To Customers’ Accounts During Service Visits. That Gave Him Varying Levels Of Access To Their Systems, Including The Video Streams

John Honovich

IPVM | 04/23/20 11:37pm

SeeADT employee had access to more than 200 DFW customers’ home security systems, company says, quote:

Home security company ADT is alerting more than 200 of its customers in the Dallas-Fort Worth area that their accounts were compromised by a former employee who had unauthorized access to their security systems over the last several years.

According to a company spokesman, a Dallas-area technician added his personal email address to customers’ accounts during service visits. That gave him varying levels of access to their systems, including the video streams of security cameras. [emphasis added]

Thoughts?

Login to read this IPVM discussion.

Why do I need to log in?

IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

John Honovich

IPVM | 04/23/20 11:39pm

* *********:

**** ** *** ***** was ** ********?
*** *** *** *** know? ** **** *** monitored ** ***** *******? If **, ****** ** be?

Geoffrey King

In reply to John Honovich | 04/23/20 11:51pm

** ********** ****** ** monitored *** * ****** how **** ***** ********* are *** **** ******. Even ** ** ** just * ******** (*** alone ***+ ** **** case) ** ** *** acceptable.

***** *** ******* ******** is ****** *** ******* at ******* ***** ** their *** ******** *******, you ***** **** **** companies **** *** **** are ********* * ********** service ***** **** ********** in ***** ** (*) protect ***** ********* *** (B) ***** ***** *** liability. ** ****, **** should ** ********* **** safeguards ** **** ***** customers ***** ** ****.

Christopher Freeman

04/23/20 11:55pm

*** * **** **** to ***** *** ******* protocal *** *** **** self ** *** ******* seat .

**** ******* * ****** there ********** *** *** customer **** , *** I **** **** **** anytime, *** ****** **** the ***, *** *** , **** * * false ***** ** ********** to *** ******** , after * ***** **** the **** ** ** longer **** ******* ** able ** ******* ** the ***** ** *** for *** ******** , the ******** ******* ******* with ******* *** ******* it ** *** , negative ****** ** *******

Brian Rhodes

IPVMU Certified | 04/23/20 11:59pm

**** ** *** ***** was ** ********?

*'* ******** **'* * perv ***/** *** ****** to ********** ****** ******* calls **** ** ********. With *** *** ********, he ***** *** ******/******* to *** ******* ** was *********** *** **********.

*'* *** ****** ** justify *** ******* ****.

Undisclosed Integrator #2

In reply to Brian Rhodes | 04/24/20 01:47am

******* *********** ** **** is * *** ****. I'm **** ********* **** they ****'* **** **** he *** **** *** access. *** ***'* **** information ***** ******?

Undisclosed #3

IPVMU Certified | In reply to Undisclosed Integrator #2 | 04/24/20 02:28am

******* *********** ** **** is * *** ****.

*** **** ****** ** wait?

Undisclosed Integrator #2

In reply to Undisclosed #3 | 04/24/20 02:50am

***** ***** ** ******** this ****** ******** ***** feeds **** ********* ******. Sounds ******** ** **.

Undisclosed #3

IPVMU Certified | In reply to Undisclosed Integrator #2 | 04/24/20 04:42am

****** ****** ***** *** personal ****** ** *** video ***** ** ******,

*) * ****

*) *** * **** but ***** ** **** if **** **** **** a **** ******* **** are ***** ********* *****.

*) ********** ****

*** ** ******* *** "innocent ***** ****** *****", i'll ****** *.

Undisclosed End User #5

In reply to Undisclosed Integrator #2 | 04/24/20 03:00pm

* **** * **** who *** ****** ***... you ******** **** **** skeletons ** **** ****** too.

Undisclosed Manufacturer #8

In reply to Brian Rhodes | 04/24/20 05:58pm

** ***** ********** *** also ****. *** **** stories ** *** *** in *** **** ***** hidden ******* ** ****** and *****'* *********? *** those *** **** *** A-Hole's ******* ******.

Undisclosed Integrator #1

04/24/20 12:06am

* ***** *** ********, this ********** ****** *** only **** ***** ** security *******, ** **** had ** **** ***. But **** ****** ** blacklisted **** **** ********** in *** ***** ** TX. *** ******* ***** states **** ******* **** licensing ****** ** ******** as ****. ** **** personal ***** *** *** employee ***** ** **** crosses ** ******* ****. Criminal ***, *********** ******* but *** *** ** knows *** **** ****** I *******.

Undisclosed #4

04/24/20 07:43am

******** ****** ***** *** BTK ******? **** ******....

Dwayne Cooney

04/24/20 03:08pm

**** ** ********** *********... what ** *****.

*** ********** ****** **** checks *** ******** *** this **** ** *****.

***** ************* ***** ******* the ****** *** * first **** **** ************** for ****** ***********. **'* not **********...

Undisclosed Integrator #6

In reply to Dwayne Cooney | 04/24/20 04:54pm

********** ***** *** **** is *** ** *** areas **** ** **** to *** ****** ** think ***** ******* *** benefit ***'* **** ********. All *** **** ** that *** *****'* *** a *******... ***. *** never **** ** *** have **** ******* ****** until *** **** ** with * ********* **** this ** **** *****.

Daniel Tyrrell

04/24/20 03:18pm

******* ** ** ** Chubb ****, **'* *** e-mails **** **** ****** probably **** * ******* saying "** *** ** audit ** Customer> *** *** ******* many **** ***** ** the **** ********. **** putting **** *** ***** in *** Customer>'s *****." * ***** any ** *** ***** who *** ** *** malicious, ******** **** *** testing ** *** ********* code ***** *** **** for **** ********* ****** the ****** ****** *** in *****.

**** ***** ****, ****** remote ****** ** ***+ customers, **, ********* ***** is ***** ** *****. Why * ******** *-****, why *** *** **** ADT/Company *-**** ** ***'** just ****** ** **** out *********?

*'** *** ******** ****** for ********** ********* ******, but *** ********* **** it *** *****, *** I ****'* **** ****** access, *'* **** ** be ** ***** **** to *** **. ******* I *** ** ***** as * **** ** account, ** *** * string ** ********* ********** their ************* *****. ***** awhile ** **** ****'* call ***** ********** *********, I'd **** **** ** delete ** *******.

Undisclosed Integrator #9

In reply to Daniel Tyrrell | 04/27/20 05:54am

*'* **** ******** **** wasn't *********. ** "******" is **/*** *** ***** of ****** ***** ** reset / ****** * camera ** *** ** he/she ******* * *** in ** ****** *** accounts ********. **** ** a ***** **** * have **** **** ** the *** ****. ** "guess" ** **** **/*** used ***** ******** ***** address ** ***** ** security ******** ** **** employees **** ****** ************ access ** ********. ** would ** * ****** tricky ** ***** ****. I ***** *** ***** say ** *** **** email *** ** **** a ******* ****** ** accounts ** ***** ******* an *****. ******* ***** are ***** ***** ******** owners **** **** * large ****** ** ******** under ***** *******. ***** this **** **** *** saying **** ********** **** the **** ** ****. To ****** **** **** is **** ** ****** with ** *********** ***** than **** **** ******* gave.