Jump to content

Adobe

From Consumer Rights Wiki
Revision as of 22:43, 26 September 2025 by Vindicator4021 (talk | contribs) (Alleged use of user data for AI training: It's a proper paragraph now. (Though, most of the things mentioned in this section seem to be moreso privacy concerns than specifically related to AI, so it might need more edits.))

⚠️ Article status notice: This article has been marked as incomplete

This article needs additional work for its sourcing and verifiability to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. In particular:

  1. Many claims made without proper citations.

This notice will be removed once the issue/s highlighted above have been addressed and sufficient documentation has been added to establish the systemic nature of these issues. Once you believe the article is ready to have its notice removed, please visit the Moderator's noticeboard, or the discord and post to the #appeals channel.

Learn more ▼

Article Status Notice: Inappropriate Tone/Word Usage

This article needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Specifically it uses wording throughout that is non-compliant with the Editorial guidelines of this wiki.

Learn more ▼

Adobe
Basic information
Founded 1982
Legal structure Public
Industry Software
Official website https://adobe.com/


Adobe is a software company based in San Jose, California that specializes in creative software such as photo editing, video editing, animation, illustration, web development, and more. Founded in 1982, the company developed the Portable Document Format (PDF) in 1992, as well as a full suite of creative software. Widespread adoption of their products by novices, industry professionals, and nation-states has enabled Adobe to carve out a significant market share in the creative software industry. In FY24, Adobe's Digital Media Segment reported $15.86 billion in revenue to the Securities and Exchange Commission (SEC). [1]

Consumer impact summary

Lack of ownership

Adobe has switched from a perpetual license model to a subscription model (Creative Cloud).

Proprietary file formats

Works created in Adobe software come in Adobe-exclusive file formats such as .psd for Photoshop and .indd for InDesign.

Data breaches

In 2013, Adobe disclosed a data breach affecting approximately 3 million customers. This number was later revised to approximately 38 million. [2] This incident resulted in a $1,000,000 settlement and a promise of new security policies. [3] In 2019, researchers discovered that Adobe's Elasticsearch database was insecure, which may have exposed approximately 7.5 million users' information. [4] Breaches impacting U.S. federal agencies and Adobe Commerce/Magneto stores also occurred in 2023 and 2024, respectively. [5][6]

Incidents

Transition to subscription-based software

Adobe initially distributed their software with perpetual licenses, allowing their users to make a one-time payment to own and access a specific application or, through Adobe's Creative Suite, a collection of applications. In 2011, Adobe introduced Creative Cloud, a subscription service that provides users access to an individual application or multiple applications for a monthly or yearly fee. In 2013, Adobe discontinued Creative Suite.

As of 2025, the only means to legally access up-to-date versions of many Adobe applications is through Creative Cloud. Additionally, the activation servers for perpetual licenses of previous versions of these applications have been shut down, which prevents consumers from activating the software using a legitimate copy and a serial number.

Creative Cloud offers various subscription options, including monthly plans (with monthly or annual billing) or prepaid annual plans. There are also plans for individual applications and bundles containing multiple applications. Prices of individual applications range from $22.99 per month or $263.88 prepaid annually. The Creative Cloud Pro subscription, which includes 22 applications and some additional extras including 100gb of cloud storage, is priced at $69.99 per month or $779.88 prepaid annually.

Plans billed annually but paid monthly have a cancellation fee 14 days after purchase. This fee is set at 50% of the remaining contract balance. For example, if the user cancels the plan in the seventh month of an annual plan that costs $69.99 per month, they would incur a fee of $174.98. Prepaid annual plans do not offer refunds or cancellation options after 14 days.

Alleged use of user data for AI training

Main article: Adobe's AI policy

Adobe has been accused of using user information for the purpose of training artificial intelligence. Applications like Adobe Fresco and Adobe Scan have cloud synchronization with no choice to opt out, and they do not implement end-to-end encryption. Additionally, they monitor users' reading behavior within eBooks. Adobe also employs an interface design known as dark patterns in their software, meaning that certain features and options that a user has disabled may be re-enabled automatically during software updates.

User documents forced into the cloud with no opt-out

Some of Adobe's iPad applications, including, but not limited to, the digital painting application Adobe Fresco[7] and the document scanning application Adobe Scan[8], require an account to access and do not offer any option to opt out of syncing all documents created in these applications with Adobe's cloud servers. Similarly, the new non-Classic versions of Lightroom are fundamentally built around uploading all images to Adobe's cloud.

There is no end-to-end encryption, i.e., Adobe has full access to all of these files. Disabling internet access makes it possible to work offline, but any files created in the affected apps immediately sync to the cloud in the background as soon as the device is connected to a network again.

As an American company, Adobe is subject to the United States Cloud Act, which requires all US companies to grant the US government access to any user data even if stored on servers outside their jurisdiction and comply with requests to help with spy operations upon request.

Spying on users' eBook reading activities

In 2014, it was revealed that Adobe Digital Editions, Adobe’s e-book reading application, reported extensive information about users' reading habits back to Adobe. This included several unique identifiers; which e-books were added to the application; when which one was opened, and for how long; percentage read; and page navigation information.

All of this information was transmitted completely unencrypted in plain text. This meant that even someone else who was on the same public Wi-Fi as another user would have been able track their reading activities in real time, entirely undetected.[9]

Disrespect for user choices

Adobe uses a dark pattern where settings which a user has disabled are re-enabled during or after each update. The same choice is presented with the desired setting as a default many times in the hope that the user will either give up or accidentally forget to uncheck the option.

For instance, this happened with the option to automatically install updates in the Adobe Flash installer. The same dark pattern is currently used in the Adobe Creative Cloud Desktop application, which presents the same option on each update and requires the user to disable it manually every single time if they do not wish to relinquish control to Adobe over when updates happen.

Whether this is to be attributed to stupidity or malice is debatable, as for instance Adobe Lightroom Classic also has a habit of resetting the language to the system language after every update instead of what was manually chosen in preferences, and the Windows version of Adobe Illustrator had, for a very long time, required the user to manually maximize the application window and re-enable the document rulers after each startup until the issue was finally addressed when the application was moved to a different GUI framework.

User information leaks and data breaches

In 2013, credit card information and personal data of 38 million users was exposed in a data breach.[10]

In 2019, Adobe left about 7.5 million Creative Cloud customer records in a database publicly accessible online in gross negligence. The database was not even protected with a password.[11]

Products

Adobe Creative Cloud

Adobe's previous line of creative software has been joined into a wider ecosystem called the Adobe Creative Cloud. The Creative Cloud includes updated versions of the previously purchasable software:

  • Photoshop
  • Lightroom
  • InDesign
  • After Effects
  • Dreamweaver
  • Illustrator
  • XD
  • and many more

Included with the Creative Cloud, depending on plan options, Adobe also offers cloud based storage, typefaces, and stock photos and other stock files.

References

  1. ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934
  2. Finkle, Jim (29 Oct 2013). "Adobe data breach more extensive than previously disclosed". reuters.com/.
  3. "Adobe to Pay $1 Million, Update Security Policies to Resolve Multistate Investigation Into Data Breach". mass.gov. 15 Nov 2016.
  4. Khandelwal, Swati (26 Oct 2019). "Unsecured Adobe Server Exposes Data for 7.5 Million Creative Cloud Users".
  5. "Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers". cisa.gov. 5 Dec 2023.
  6. Sansec Forensics Team (1 Oct 2024). "Thousands of Adobe Commerce stores hacked in competing CosmicSting campaigns". sansec.io.
  7. PaulaArtist2; et al. (2021-12-13). "[How To] Save work locally / work offline". Adobe Community. Retrieved 2025-09-22. {{cite web}}: Explicit use of et al. in: |last= (help)CS1 maint: numeric names: authors list (link)
  8. Tagra, Ria (2021-06-14). "Does Adobe Scan offer a way to not utilize the Adobe Cloud". Adobe Community. Retrieved 2025-09-22.
  9. Gallagher, Sean (8 Oct 2014). "Adobe's e-book reader sends your reading logs back to Adobe—in plain text". ArsTechnica. Retrieved 16 Mar 2025.{{cite web}}: CS1 maint: url-status (link)
  10. Patel, Maaz (26 Mar 2023). "The Adobe Attack of 2013: A Cautionary Tale of Cybersecurity Failure". Medium. Retrieved 16 Mar 2025.{{cite web}}: CS1 maint: url-status (link)
  11. Cimpanu, Catalin (26 Oct 2019). "Adobe left 7.5 million Creative Cloud user records exposed online". [ZDNet]. Retrieved 16 Mar 2025.{{cite web}}: CS1 maint: url-status (link)