Home Depot said Thursday that its recent cyber attack put an estimated “56 million unique” credit and debit cards at risk.

The company said the security criminals used malware not previously seen in other attacks and that it had been present between April and September of this year.

The Atlanta-based home improvement giant began investigating the breach Sept. 2 second after being notified by banks and law enforcement.

“We apologize to our customers for the inconvenience and anxiety this has caused, and want to reassure them that they will not be liable for fraudulent charges,” said Frank Blake, Home Depot’s chairman and chief executive officer. “From the time this investigation began, our guiding principle has been to put our customers first, and we will continue to do so.”

About the Author

Keep Reading

A long line forms outside Eats on its final day of business Saturday, Oct. 18, 2025, on Ponce de Leon Avenue in Atlanta. Bob Hatcher announced Oct. 3 that the restaurant would close after 32 years. (Amy Wenk/AJC)

Credit: Amy Wenk

Featured

Known as a dogged investigator, Ashleigh Merchant made a name for herself in Cobb County’s tight-knit legal community by taking big swings. (Natrice Miller/AJC)