// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Home Depot
Breach Record

Home Depot

DISCLOSED 2024-04-07 · SUPPLY CHAIN

Home Depot confirmed a data breach after a SaaS vendor mistakenly exposed a limited sample of employee data. The exposed information could potentially be used in targeted phishing attacks. The incident was caused by a third-party vendor error.

The record

What we know

Disclosed
2024-04-07
Attack vector
Supply Chain
Sector
retail
Country
US
Domain
homedepot.com
Data classes exposed
employee data
ColdRecon assessment

Could a positive-security control have prevented this?

Verdict · unclear · opinion

The breach involved a third-party SaaS vendor exposing data, not an endpoint compromise. A positive-security model on endpoints would not have prevented this data exposure.

Our assessments are opinion, grounded in the cited public facts. Read them critically.

Sources

Cited reporting

Similar vector · recent

Other supply chain breaches on file

This page is the permanent ColdRecon entry for the Home Depot disclosure. It updates if new public reporting emerges. All tracked breaches →

Home Depot just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →