The Home Depot
Disclosed Sep 2, 201412 years ago56,000,000 affectedSettled
Custom malware at Home Depot registers exposes 56 million payment cards
Home Depot confirmed a breach of its US and Canadian payment systems after banks traced stolen cards to its stores; unique custom malware present between April and September 2014 put about 56 million payment cards at risk.
What is known
| People affected | 56,000,000 (as reported by the organization) |
|---|---|
| Disclosed | Sep 2, 2014 |
| Discovered | Sep 2014 |
| Attack | Hacking |
| Data exposed | Payment cards |
| Sector | Retail · US |
| Status | Settled |
| Lawsuit or fine | USD 17.5M 46-state AG settlement (Nov 2020) (about $18M) |
Sources
| Source | |
|---|---|
| Banks: Credit Card Breach at Home Depotkrebsonsecurity.com · News | News |
| Home Depot Form 8-K, September 18, 2014sec.gov · SEC filing | SEC filing |
| NY AG: USD 17.5 Million after data breach at The Home Depotag.ny.gov · Regulator | Regulator |
| Home Depot Investigating Potentially Massive Credit Card Breachtechcrunch.com · News | News |
Notices filed
Other breaches at The Home Depot
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Leaked GitHub token exposed Home Depot internal systems for a yearDec 12, 20259 months agoExposed dataUnverified | Dec 12, 20259 months ago | Exposed data | Retail | Unverified | Unknown |
History of this record
- 2026-09-25 · disclosed: 2014-09-08 to 2014-09-02 · admin
- 2026-09-25 · status: confirmed to settled · admin
- 2026-09-25 · fine_usd: empty to 17500000 · admin
- 2026-09-25 · lawsuit: empty to USD 17.5M 46-state AG settlement (Nov 2020) · admin
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.