Home Depot data breach exposes employee information

Home Depot data breach overview: 

• Who: Home Depot confirmed it suffered a data breach after the threat actor IntelBroker leaked a sample of limited data belonging to approximately 10,000 employees. 
• Why: Home Depot attributed the data breach to one of its Software-as-a-Service (Saas) vendors accidentally making the employee information public during system testing. 
• Where: The data breach affects certain Home Depot employees nationwide.

A Home Depot data breach was revealed earlier this month after the company confirmed one of its vendors mistakenly exposed a small amount of sample employee data. 

The home improvement retailer reportedly confirmed the breach to Bleeping Computer after a threat actor leaked limited data of approximately 10,000 Home Depot employees on a hacking forum April 4. 

The data breach exposed the Home Depot employees’ names, email addresses and corporate IDs —  all information that could now potentially be used in targeted phishing attacks against the employees, Bleeping Computer reports. 

Home Depot reportedly told Bleeping Computer the data breach was caused by one of its software as a service (SaaS) third-party vendors inadvertently making the information public while testing their systems. 

Threat actor claims Home Depot data breach exposed 10,000 employees’ ‘corporate information’

The Home Depot employee data was reportedly leaked by a threat actor known as IntelBroker, an individual who has previously been connected to a data breach involving DC Health Link, which services U.S. House members and their staff and families, Bleeping Computer reports. 

IntelBroker wrote on the hacking forum that the data sample originated from an April 2024 Home Depot data breach that “exposed the corporate information” of the employees, according to a screenshot posted by Bleeping Computer. 

Home Depot is the nation’s largest home improvement retailer, with more than 2,300 store locations in North America to go with more than a total of 475,000 employees, according to Bleeping Computer. 

A consumer filed a separate class action lawsuit against Home Depot earlier this year over claims the company allowed Google to use artificial intelligence to access and record customer calls without their consent. The class action lawsuit argues Google and Home Depot violated the California Invasion of Privacy Act by allowing “surreptitious third-party monitoring and recording of phone calls” via the Google Cloud Contact Center AI program. 

Are you or is someone you know affected by the Home Depot data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• GardaWorld class action claims data breach affected almost 40K individuals
• Multiple class actions filed over AT&T data breach
• Roku data breach impacts 15,000+ customers
• Fidelity data breach affects 28,000+ customers