Home Depot Hammered by Supply Chain Data Breach
SaaS vendor to blame for exposing employee data that was ultimately leaked on Dark Web forum, according to the home improvement retailer.
![a photo of a home depot storefront a photo of a home depot storefront](https://eu-images.contentstack.com/v3/assets/blt69509c9116440be8/blt3dbc6f8d0a88d6e1/6616c08fd7d73b3005825ca5/home_depot_Ian_Dagnall_alamy.jpg?width=850&auto=webp&quality=95&format=jpg&disable=upscale)
A hacking forum leak has led Home Depot to confirm that its employee data was compromised via a third-party software vendor.
Home Depot did not identify the breached software-as-a-service (SaaS) vendor but said an error exposed the names, corporate IDs, and email addresses of a "small sample" of its employees, according to reports. Now up for sale on the Dark Web, this is the type of data that could be used to fuel targeted phishing cyberattacks.
The incident highlights how selecting SaaS vendors with strong cybersecurity protections is critical for enterprises, according to Tamir Passi, director of product with DoControl.
About the Author(s)
You May Also Like
How to Amplify DevOps with DevSecOps
May 22, 2024Generative AI: Use Cases and Risks in 2024
May 29, 2024Smart Service Management
June 4, 2024