The Home Depot

Disclosed Dec 12, 2025Unverified

Leaked GitHub token exposed Home Depot internal systems for a year

A researcher found a Home Depot employee's GitHub access token published online since early 2024 that granted access to hundreds of private source code repositories and cloud systems; it was revoked after TechCrunch contacted the company.

What is known

People affected	Not stated in the sources we have
Disclosed	Dec 12, 2025
Attack	Exposed data
Data exposed	Source codeAPI keys
Sector	Retail · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization

Sources

Newstechcrunch.com

Home Depot exposed access to internal systems for a year, says researcher

Notices filed

TotalDec 12, 2025

ResearchCount not stated

Other breaches at The Home Depot

Custom malware at Home Depot registers exposes 56 million payment cardsHacking exposed payment cards.Hacking56M affectedRetailUSSep 2, 2014

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about The Home Depot