Home Depot confirms data breach, investigation continues


The nation's largest home improvement retailer, Home Depot, has confirmed that its payment data systems have been breached.

In a statement, the company says it continues to determine the full scope, scale and impact of the breach. It also says there is no evidence that debit PIN numbers were compromised.

The company says it's investigating sales at its U.S. and Canadian stores from April of 2014 and on.

Home Depot chairman and CEO Frank Blake said:

"We apologize for the frustration and anxiety this causes our customers, and I want to thank them for their patience and support as we work through this issue. We owe it to our customers to alert them that we now have enough evidence to confirm that a breach has indeed occurred. It's important to emphasize that no customers will be responsible for fraudulent charges to their accounts."

According to Forbes, the breach affected Home Depot stores in the U.S. and Canada, while stores in Mexico and the HomeDepot.com website appear to have been spared.

A similar breach last year also struck retailer Target during the height of the holiday shopping season.

Security expert Brian Krebs, who broke the news of both breaches, said it appears the same type of malware was used in both cases.

According to Krebs, the information on the malware adds another indicator that those responsible for the breach at Home Depot also were involved in the December attack on Target.

Krebs also notes that cards apparently stolen from Home Depot shoppers first turned up for sale on Rescator[dot]cc, the same underground cybercrime site that sold millions of cards stolen in the Target attack.

Home Depot is offering free identity protection services, including credit monitoring, to customers who used a payment card at a Home Depot store from April 2014 and on. Customers who want to take advantage of the services can learn more at the company's website or by calling 1-800-HOMEDEPOT.

Home Depot has more than 30 stores in Minnesota.

Next Up


Walter Mondale dies at age of 93

His death was confirmed by family on Monday.

National Guard

Man charged in connection to shooting that injured National Guard troops

Four soldiers were inside a military vehicle that was shot at.

Chauvin trial

Walz declares emergency in Twin Cities, bringing in police from Ohio and Nebraska

The governor has asked the Legislature for emergency funding for the additional police.

derek chauvin court - closing arguments

Closing arguments in Derek Chauvin trial: Here's what was said

The jury listened to lengthy presentations from the prosecution and defense.


Man, 55, airlifted to a hospital after hit-and-run in Granite Falls

The passenger in the vehicle told police about the incident.

Minneapolis, unrest

Facebook labels Minneapolis 'high-risk,' will remove posts that incite violence

Facebook will remove posts that call for weapons to be brought to Minneapolis and anything that celebrates George Floyd's death.


After being sued, MyPillow is now suing Dominion Voting Systems

The company's lawsuit claims the voting system suppressed free speech and hurt its business relationships.

Chet Holmgren

Chet Holmgren makes his decision ... and it's Gonzaga

The Minnesota basketball phenom is following the footsteps of Jalen Suggs.

Sarah Glover

MPR News hires NBC's Sarah Glover as new managing editor

The experienced journalist was the first to serve two terms as president of the National Association of Black Journalists (NABJ).

football play

Watch: Sixth-grader with cerebral palsy makes touchdown in Detroit Lakes

Kale Hannahs' classmates made sure he got a chance to play during recess.

coronavirus, covid-19

Here is Minnesota's COVID-19 update for Monday, April 19

The latest from Minnesota health officials.