Summary
This 8-K filing from The Home Depot, Inc. (HD) on September 8, 2014, confirms a significant data breach affecting its payment data systems in U.S. and Canadian stores. The breach, which the company began investigating on September 2nd after receiving reports from banking partners and law enforcement, potentially impacted customers who used payment cards in stores from April 2014 onwards. While the full scope is still under investigation, there is currently no evidence that debit PIN numbers or online customer data were compromised. The company is offering free identity protection services, including credit monitoring, to affected customers as a precautionary measure. In response to this incident and the broader threat of cyber-attacks, Home Depot is accelerating its rollout of EMV 'Chip and PIN' technology to all U.S. stores by the end of 2014, ahead of the industry's October 2015 deadline. Investors should monitor the company's disclosures regarding the ongoing investigation, potential financial impact, and the effectiveness of its enhanced security measures.
Key Highlights
- 1The Home Depot confirmed a breach of its payment data systems affecting U.S. and Canadian stores.
- 2The breach potentially impacts customers who used payment cards in stores from April 2014 onwards.
- 3There is no evidence that debit PIN numbers or online customer data (HomeDepot.com) were compromised.
- 4The company is offering free identity protection services, including credit monitoring, to potentially affected customers.
- 5Investigation began on September 2, 2014, involving internal IT security, external experts, banking partners, and law enforcement.
- 6Home Depot is accelerating its EMV 'Chip and PIN' rollout to all U.S. stores by the end of 2014.