Home Depot said Thursday that its recent cyber attack put an estimated “56 million unique” credit and debit cards at risk.

The company said the security criminals used malware not previously seen in other attacks and that it had been present between April and September of this year.

The Atlanta-based home improvement giant began investigating the breach Sept. 2 second after being notified by banks and law enforcement.

“We apologize to our customers for the inconvenience and anxiety this has caused, and want to reassure them that they will not be liable for fraudulent charges,” said Frank Blake, Home Depot’s chairman and chief executive officer. “From the time this investigation began, our guiding principle has been to put our customers first, and we will continue to do so.”

About the Author

Keep Reading

Cabbagetown resident Nadia Giordani rents a tiny home in her backyard. She'll soon open the booking window for the 2026 FIFA World Cup. (Riley Bunch/AJC)

Credit: Riley Bunch/riley.bunch@ajc.com

Featured

Ceudy Gutierrez reads a book to her 2-year-old son, Matias, at their home in Buford, GA, on Tuesday, Nov. 18, 2025. Ceudy Gutierrez is struggling to make ends meet for herself and her three young kids following her husband’s ICE arrest earlier this fall. (Miguel Martinez/ AJC)

Credit: Miguel Martinez-Jimenez