Home Depot credit card security breach could cost $3B

The theft of credit card information from Home Depot by hackers earlier this year could affect up to 60 million customers and lead to as much as $3 billion in bogus purchases, a major credit protection firm says.

Security firm BillGuard estimates 60 million accounts could be affected

Home Depot says hackers have managed to steal customer credit card info, but has not yet provided much detail for how big the security breach was. ( Daniel Acker/Bloomberg)

The theft of credit card information from Home Depot by hackers earlier this year could affect up to 60 million customers and lead to as much as $3 billion in bogus purchases, a major credit protection firm says.

Earlier this month, the home improvement retailer said its networks were accessed by unknown hackers for an unknown amount of time earlier this year. Home Depot has confirmed that all of the chain's 2,200 stores in the U.S. and Canada may have been hit, but so far the chain has declined to reveal how big the breach was.

After looking at more than a dozen similar breaches this year and assessing what happened in those instances, credit protection firm BillGuard says millions of people could be affected by the breach that will likely lead to billions of dollars in bogus charges.

"We believe that approximately 60 million accounts were exposed in the Home Depot breach, and estimate that $2-3 billion in fraud is likely to strike these compromised accounts overall," the company said in a post on its website last week.

Not all of those 60 million cardholders will necessarily see bogus charges, however. Only about 10 to 15 per cent of them are likely to see any fraudulent activity, BillGuard says, with an average cost expected to be around $332 each.

"BillGuard users are reporting fraudulent charges from a variety of sources, both online and brick-and-mortar," the company says. "Charges range from the five dollar range to tens of thousands of dollars. Some report a single fraudulent charge at one merchant, while others were hit by multiple charges from multiple merchants."

Home Depot is offering identity protection services, including credit monitoring, to any customer who has shopped at a Home Depot store in 2014, from April onward. But cybersecurity experts advise customers to keep a keen eye on their credit card activity history and watch out for any curious transactions.

Comments

To encourage thoughtful and respectful conversations, first and last names will appear with each submission to CBC/Radio-Canada's online communities (except in children and youth-oriented communities). Pseudonyms will no longer be permitted.

By submitting a comment, you accept that CBC has the right to reproduce and publish that comment in whole or in part, in any manner CBC chooses. Please note that CBC does not endorse the opinions expressed in comments. Comments on this story are moderated according to our Submission Guidelines. Comments are welcome while open. We reserve the right to close comments at any time.