Home Depot: 56M Cards Impacted, Malware Contained
Summary: Home Depot disclosed that custom-built malware stole an estimated 56 million debit and credit card numbers from customers between April and September 2014, making it the largest retail card breach on record. The company said the malware was eliminated from its U.S. and Canadian store networks and that enhanced encryption from Voltage Security, launched in January 2014, was completed in all U.S. stores on September 13, 2014.
What's compelling: Financial institutions reported Visa and MasterCard alerts showing card data was still being stolen from Home Depot registers until September 7, 2014 - five days after the breach became public - so the 56 million figure reflects a five-month dwell time that outpaced the company's own containment timeline.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026