Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

9/2/2014
01:35 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
100%
0%

Home Depot The Latest Hack Victim?

Home improvement chain--along with law enforcement and banks--are investigating 'unusual activity.'

Another day, another possible retail breach: Home Depot reportedly is looking into a potential data breach.

KrebsOnSecurity reported today that several banks have seen signs of a potential credit and debit card breach at Home Depot. Specifically, a fresh collection of payment cards that have appeared in the cyber underground may be those from sales at the home improvement chain. A Home Depot spokesperson told KrebsOnSecurity:

    I can confirm we are looking into some unusual activity and we are working with our banking partners and law enforcement to investigate... Protecting our customers' information is something we take extremely seriously, and we are aggressively gathering facts at this point while working to protect customers. If we confirm that a breach has occurred, we will make sure customers are notified immediately. Right now, for security reasons, it would be inappropriate for us to speculate further -- but we will provide further information as soon as possible.

The attackers behind the payment card breach may be the same Russian and Ukrainian cybercrime gang that hit Target, Sally Beauty, P.F. Chang's, and other retailers, the report said.

Interestingly, the gang named the newly pilfered card "American Sanctions" in an apparent jab at US economic sanctions against Russia.

The breach could affect 2,200 US Home Depot stores, according to KrebsOnSecurity.

Kelly Jackson Higgins is the Executive Editor of Dark Reading. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
NormanSwe
50%
50%
NormanSwe,
User Rank: Apprentice
9/10/2014 | 3:25:03 PM
Re: Another Attack?
I recently had a problem with Phishing attacks can be very dangerous and users should be Careful When some receive suspicious emails, phone calls etc. Here are sime articles with some tips how to Avoid Them: stickypassword.com
GonzSTL
50%
50%
GonzSTL,
User Rank: Ninja
9/5/2014 | 3:48:51 PM
Re: Another Attack? What a Surprise!
I find it interesting that there is nothing new in Home Depot's Media Center regarding this situation. Krebs gathered zip code information on the cards for sale on the rescator site and then correlated them with the zip code of Home Depot locations, resulting in a 99.4% overlap. It would be an unusually big coincidence if there was no breach. Although I understand that they could be tight lipped about it because it is an ongoing investigation, I hope that something is already being done to mitigate the risk of fraud that could potentially result from the sale of those cards.
Kelly Jackson Higgins
50%
50%
Kelly Jackson Higgins,
User Rank: Strategist
9/3/2014 | 12:17:13 PM
Re: Another Attack? What a Surprise!
No shock here, for sure. Likely most major retailers are 0wned and either don't know it yet or aren't talking yet. 

Home Depot just issued this message to their customers--no confirmation of the breach yet, but basically a heads up.

https://corporate.homedepot.com/MediaCenter/Pages/Statement1.aspx
GonzSTL
50%
50%
GonzSTL,
User Rank: Ninja
9/3/2014 | 9:56:28 AM
Another Attack? What a Surprise!
Ho hum ... just another company breach, another fresh batch of credit cards on the black market, more banks absorbing fraud and credit card reissuances, insurance companies paying out, another brand tarnished, causing consumers to lose faith in the company, and another company gets hammered at the stock exchange. The result - just another company scrambling to entrench their data in a veritable fortress of security. Just another example of 20-20 hindsight! When will organizations take security seriously enough to make it one of their top priorities? When will executive management get the message that unless they lead this charge, they will be ... just another company that gets breached? Data breaches have become almost a weekly news item, and will continually be so for the foreseeable future.

Here is what I think it will take to convince executive management to elevate the whole security agenda. Imagine a company breach that results in a total electronic data loss in their production environment. Think about that for a second - no sales because they have no idea what products they have, no working POS system, no customer data, nothing in the form of electronic data processing ... nothing. Nothing moves in the company until their DR plans kick in and achieve business continuity. Data breaches do not stop business from continuing operations, but a total data loss will. When that happens to a big name brand like Target or Home Depot, then company executives will realize that a new phase has arrived in the threat horizon. Data loss is a very scary scenario, but business stoppage is like a stake through the heart, difficult to recover from within a short time frame. I really hope it does not come to that, and that executives everywhere wake up and smell the coffee before that happens to them.
For Cybersecurity to Be Proactive, Terrains Must Be Mapped
Craig Harber, Chief Technology Officer at Fidelis Cybersecurity,  10/8/2019
A Realistic Threat Model for the Masses
Lysa Myers, Security Researcher, ESET,  10/9/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
2019 Online Malware and Threats
2019 Online Malware and Threats
As cyberattacks become more frequent and more sophisticated, enterprise security teams are under unprecedented pressure to respond. Is your organization ready?
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-17593
PUBLISHED: 2019-10-14
JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator.
CVE-2019-17594
PUBLISHED: 2019-10-14
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVE-2019-17595
PUBLISHED: 2019-10-14
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.
CVE-2019-14823
PUBLISHED: 2019-10-14
A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to...
CVE-2019-17592
PUBLISHED: 2019-10-14
The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option.