FBI Dallas Special Agent in Charge Matthew J. DeSarno said in a statement:
“The defendant used his position of employment to illegally breach the privacy of numerous people. The FBI works with our law enforcement partners to thoroughly investigate all cyber intrusions and hold criminals accountable for their actions. Cyber intrusions do not only affect businesses, but also members of the public. We encourage everyone to practice cyber hygiene with all their connected devices by reviewing authorized users and routinely changing passwords. If you become the victim of a cybercrime, please contact the FBI through ic3.gov or 1-800-CALL FBI.”
ADT has been updating a page about the situation over the past months. In its first statement from April, the company said a customer notified it about an unauthorized email on their account. “As soon as we discovered this, the unauthorized access was revoked, and the employee was terminated. We also reported him to law enforcement,” ADT wrote at the time.
As Ars Technica notes, ADT is now dealing with several lawsuits over what issue, one of which is a proposed class action filed on behalf of minors living in the homes Aviles hacked into. BuzzFeed News also reports that the plaintiffs in three lawsuits said ADT tried to offer them confidentiality agreements when they were notified of the security breach.