Skip to footer

Home Depot hackers stole 53 million e-mail addresses with card data

Home Depot said Thursday that hackers accessed its network from a third-party vendor. The Home Depot breach surpassed Target's pre-Christmas 2013 data theft, which compromised 40 million credit and debit cards and hurt sales and profits. 

|
Mark Humphrey/AP
A sign stands outside a Home Depot in Nashville, Tenn., Aug. 14, 2012.
  • By Anne D'Innocenzio and Sarah Skidmore Sell Associated Press

| NEW YORK

Hackers stole 53 million email addresses in addition to customers' card data, Home Depot said Thursday.

The nation's largest home improvement chain had disclosed the massive, months-long breach of 56 million debit and credit cards in September.

Home Depot's breach surpassed Target's pre-Christmas 2013 data theft, which compromised 40 million credit and debit cards and hurt sales and profits. Since late last year, Michaels, SuperValu and Neiman Marcus have been among a string of retailers that have also reported breaches, though they were smaller.

While shoppers appear to have grown numb to the hacks, the breaches have forcing changes in retailing. Target's breach pushed banks, retailers and card companies to increase security by speeding the adoption of microchips in U.S. credit and debit cards, which supporters say are more secure. Home Depotreiterated Thursday that it will be activating chip-enabled checkout terminals at all of its U.S. stores by the end of the year.

The file containing the email addresses did not contain passwords or other sensitive personal information, according toHome Depot. However, it said that customers should be on guard against phishing scams. Phishing attacks are sent through texts or emails and try to trap you into disclosing personal information.

The company is notifying affected customers in the U.S. and Canada.

Home Depot also explained how the hackers got into its system. It said that the hackers initially accessed its network in April with a third-party vendor's username and password.Home Depot said hackers stole information through malware installed on self-checkout systems in the U.S. and Canada. That's similar to what happened at Target where thieves hacked into the password of a third-party supplier.

Home Depot said that its investigation with law enforcement and efforts to further enhance its security measures are ongoing.

On Thursday it confirmed its sales growth estimate for the year and said it still expects annual profit of $4.54 per share. But unclear is how much Home Depot's future profits will be affected.

Home Depot's outlook for its fiscal 2014 year includes estimates for the cost to investigate the data breach, providing credit monitoring services to its customers, increasing call center staffing and paying for legal and professional services. However, it doesn't include any potential losses related to the breach.

Home Depot is expected to announce fiscal third-quarter results on Nov. 18.

"It's scary. The numbers are too big to comprehend," said John Kindervag, vice president and principal analyst at Forrester Research. "But what are you going to do about it?" He noted that Home Depot is lucky that there are only a few big players in the home improvement arena and so there aren't a lot of other choices to shop.

The company's stock rose 5 cents to $97.34 in extended trading Thursday. Shares have gained 18 percent in 2014.

_____

Follow Anne D'Innocenzio at — https://twitter.com/adinnocenzio

You've read  of  free articles. Subscribe to continue.
Real news can be honest, hopeful, credible, constructive.
What is the Monitor difference? Tackling the tough headlines – with humanity. Listening to sources – with respect. Seeing the story that others are missing by reporting what so often gets overlooked: the values that connect us. That’s Monitor reporting – news that changes how you see the world.
editor@csmonitor.com
Subscribe
Mark Sappenfield
Editor

Dear Reader,

About a year ago, I happened upon this statement about the Monitor in the Harvard Business Review – under the charming heading of “do things that don’t interest you”:

“Many things that end up” being meaningful, writes social scientist Joseph Grenny, “have come from conference workshops, articles, or online videos that began as a chore and ended with an insight. My work in Kenya, for example, was heavily influenced by a Christian Science Monitor article I had forced myself to read 10 years earlier. Sometimes, we call things ‘boring’ simply because they lie outside the box we are currently in.”

If you were to come up with a punchline to a joke about the Monitor, that would probably be it. We’re seen as being global, fair, insightful, and perhaps a bit too earnest. We’re the bran muffin of journalism.

But you know what? We change lives. And I’m going to argue that we change lives precisely because we force open that too-small box that most human beings think they live in.

The Monitor is a peculiar little publication that’s hard for the world to figure out. We’re run by a church, but we’re not only for church members and we’re not about converting people. We’re known as being fair even as the world becomes as polarized as at any time since the newspaper’s founding in 1908.

We have a mission beyond circulation, we want to bridge divides. We’re about kicking down the door of thought everywhere and saying, “You are bigger and more capable than you realize. And we can prove it.”

If you’re looking for bran muffin journalism, you can subscribe to the Monitor for $15. You’ll get the Monitor Weekly magazine, the Monitor Daily email, and unlimited access to CSMonitor.com.

Subscribe to insightful journalism

QR Code to Home Depot hackers stole 53 million e-mail addresses with card data
Read this article in
https://www.csmonitor.com/Business/Latest-News-Wires/2014/1106/Home-Depot-hackers-stole-53-million-e-mail-addresses-with-card-data
QR Code to Subscription page
Start your subscription today
https://www.csmonitor.com/subscribe