MisuseRetail & ConsumerRetailPrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

THE HOME DEPOT, INC.

bd_51c98def2a154109 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 10, 2014

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for THE HOME DEPOT, INC. →9 incidents on file

The Home Depot notified individuals that three HR associates were arrested for allegedly unlawfully using personal information of current and former associates and candidates. The insiders had authorized access to data including names, contact info, SSNs, driver's license numbers, and financial account numbers. The longest period of employment for the arrested associates dates back to February 7, 2011. The company is conducting an internal investigation and offering 12 months of identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 7, 2011

Begins

Feb 10, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: THE HOME DEPOT, INC.
norm: the home depot
Domain: homedepot.com

Name: THE HOME DEPOT, INC.
norm: the home depot
Domain: homedepot.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Feb 7, 2011
Materiality determined: —
Notification sent: Feb 7, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security number
Attack vector: Insider
Threat actor: Internal
Regulator citations: Working closely with appropriate government authorities
Initial access: insider_action

During the incident: Conducting a thorough internal investigation
Working closely with appropriate government authorities
Arranged for 12 months of identity protection from AllClear ID at no cost
Changes made: Taking steps to prevent a similar occurrence
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44115
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 10, 2014
Raw hash: c024f05c506a7f0638c08bc72de26c8abb554516a8c69f26e1cbc3c2686e3daf

Reporting entityTHE HOME DEPOT, INC.

Victim entityTHE HOME DEPOT, INC.

IncidentInsider

Stated responseConducting a thorough internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov