In September 2014, The Home Depot disclosed a data breach involving customers’ payment-card information. A major weakness was the company’s practice of allowing credit-card numbers to be entered directly into computers at service desks and pro desks, as well as in flooring, kitchen-cabinet, appliance, and millwork departments, instead of processing transactions through dedicated point-of-sale terminals. That broader and less controlled data-entry process created additional exposure across specialized retail counters.
The company stopped the direct-entry practice after the breach and offered affected customers who requested it one year of free credit monitoring through AllClearID. Reports also alleged that card numbers were stolen when customers used Homedepot.com, indicating that the incident was not limited to physical-store workflows. The supplied record does not identify the attackers, state a confirmed number of affected customers, or describe a court judgment or government enforcement action; the documented aftermath is therefore centered on revised payment procedures and the monitoring offer.