Home Depot: Hackers Stole 53M Email Addresses
Summary: Home Depot said the hackers who stole 56 million customer credit and debit card accounts also took 53 million customer email addresses, which the company warned could be used in phishing attacks. Home Depot said the intruders entered its network perimeter using credentials stolen from a third-party vendor, then reached point-of-sale devices through a Microsoft Windows vulnerability that was patched only after the breach.
Why it matters: The entry point was a third-party vendor's username and password, and the stolen email addresses give attackers a ready-made list of 53 million customers to target with convincing phishing lures.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026