Attacks/Breaches

9/2/2014
01:35 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
100%
0%

Home Depot The Latest Hack Victim?

Home improvement chain--along with law enforcement and banks--are investigating 'unusual activity.'

Another day, another possible retail breach: Home Depot reportedly is looking into a potential data breach.

KrebsOnSecurity reported today that several banks have seen signs of a potential credit and debit card breach at Home Depot. Specifically, a fresh collection of payment cards that have appeared in the cyber underground may be those from sales at the home improvement chain. A Home Depot spokesperson told KrebsOnSecurity:

    I can confirm we are looking into some unusual activity and we are working with our banking partners and law enforcement to investigate... Protecting our customers' information is something we take extremely seriously, and we are aggressively gathering facts at this point while working to protect customers. If we confirm that a breach has occurred, we will make sure customers are notified immediately. Right now, for security reasons, it would be inappropriate for us to speculate further -- but we will provide further information as soon as possible.

The attackers behind the payment card breach may be the same Russian and Ukrainian cybercrime gang that hit Target, Sally Beauty, P.F. Chang's, and other retailers, the report said.

Interestingly, the gang named the newly pilfered card "American Sanctions" in an apparent jab at US economic sanctions against Russia.

The breach could affect 2,200 US Home Depot stores, according to KrebsOnSecurity.

Kelly Jackson Higgins is Executive Editor at DarkReading.com. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
NormanSwe
50%
50%
NormanSwe,
User Rank: Apprentice
9/10/2014 | 3:25:03 PM
Re: Another Attack?
I recently had a problem with Phishing attacks can be very dangerous and users should be Careful When some receive suspicious emails, phone calls etc. Here are sime articles with some tips how to Avoid Them: stickypassword.com
GonzSTL
50%
50%
GonzSTL,
User Rank: Ninja
9/5/2014 | 3:48:51 PM
Re: Another Attack? What a Surprise!
I find it interesting that there is nothing new in Home Depot's Media Center regarding this situation. Krebs gathered zip code information on the cards for sale on the rescator site and then correlated them with the zip code of Home Depot locations, resulting in a 99.4% overlap. It would be an unusually big coincidence if there was no breach. Although I understand that they could be tight lipped about it because it is an ongoing investigation, I hope that something is already being done to mitigate the risk of fraud that could potentially result from the sale of those cards.
Kelly Jackson Higgins
50%
50%
Kelly Jackson Higgins,
User Rank: Strategist
9/3/2014 | 12:17:13 PM
Re: Another Attack? What a Surprise!
No shock here, for sure. Likely most major retailers are 0wned and either don't know it yet or aren't talking yet. 

Home Depot just issued this message to their customers--no confirmation of the breach yet, but basically a heads up.

https://corporate.homedepot.com/MediaCenter/Pages/Statement1.aspx
GonzSTL
50%
50%
GonzSTL,
User Rank: Ninja
9/3/2014 | 9:56:28 AM
Another Attack? What a Surprise!
Ho hum ... just another company breach, another fresh batch of credit cards on the black market, more banks absorbing fraud and credit card reissuances, insurance companies paying out, another brand tarnished, causing consumers to lose faith in the company, and another company gets hammered at the stock exchange. The result - just another company scrambling to entrench their data in a veritable fortress of security. Just another example of 20-20 hindsight! When will organizations take security seriously enough to make it one of their top priorities? When will executive management get the message that unless they lead this charge, they will be ... just another company that gets breached? Data breaches have become almost a weekly news item, and will continually be so for the foreseeable future.

Here is what I think it will take to convince executive management to elevate the whole security agenda. Imagine a company breach that results in a total electronic data loss in their production environment. Think about that for a second - no sales because they have no idea what products they have, no working POS system, no customer data, nothing in the form of electronic data processing ... nothing. Nothing moves in the company until their DR plans kick in and achieve business continuity. Data breaches do not stop business from continuing operations, but a total data loss will. When that happens to a big name brand like Target or Home Depot, then company executives will realize that a new phase has arrived in the threat horizon. Data loss is a very scary scenario, but business stoppage is like a stake through the heart, difficult to recover from within a short time frame. I really hope it does not come to that, and that executives everywhere wake up and smell the coffee before that happens to them.
Russia Hacked Clinton's Computers Five Hours After Trump's Call
Robert Lemos, Technology Journalist/Data Researcher,  4/19/2019
Tips for the Aftermath of a Cyberattack
Kelly Sheridan, Staff Editor, Dark Reading,  4/17/2019
Why We Need a 'Cleaner Internet'
Darren Anstee, Chief Technology Officer at Arbor Networks,  4/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-11486
PUBLISHED: 2019-04-23
The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.
CVE-2019-11487
PUBLISHED: 2019-04-23
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hu...
CVE-2018-7576
PUBLISHED: 2019-04-23
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
CVE-2018-8825
PUBLISHED: 2019-04-23
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).
CVE-2019-10688
PUBLISHED: 2019-04-23
VVX products using UCS software version 5.8.0 and earlier with Better Together over Ethernet Connector (BToE) application version 3.8.0 and earlier uses hard-coded credentials to establish a connection between the host application and device.