They wouldn’t know the master code but they know the installer and dealer codes. Try googling for ADT installer codes. Often they use common codes to make it easier on their installers.
Another thing you should do is check that they don’t still have the panel connected to an Alarm.com account. You can do that here.