Home Depot may be latest security breach victim

(RNN) The hardware retail store Home Depot may be the latest U.S. security breach victim, where credit and debit card information went for sale on the internet's black cybersecurity market.

Home Depot has not confirmed the data breach, which was first reported Tuesday on the cybersecurity website Krebs on Security.

The report indicates that several banks reported to "suspicious activity" and that it could be the source of a massive new batch of stolen credit and debit cards. The information was found on cybercrime underground and law enforcement and banks began investigating.

There have been no reports on how many customers or stores have been affected by the breach.

The information was being sold on rescator.cc, an underground online store that reportedly moved two large batches of stolen information on Tuesday.

Krebs on Security confirmed with Home Depot spokeswoman Paula Drake that the company is investigating.

I can confirm we are looking into some unusual and we are working with our banking partners and law enforcement to investigate, Drake said in a statement to Krebs.

Drake would not confirm a breach, but said if one is confirmed, Home Depot would make sure customers are notified immediately.

Right now, for security reasons, it would be inappropriate for us to speculate further but we will provide further information as soon as possible, Drake said.

In screenshots provided from the rescator.ccwebsite by certified computer forensics and security consultant Blake Engels, batches of the stolen data are filed under the name American Sanctions.There are two batches under the "American Sanctions," and there is also a group of data under "European Sanctions." All of the batches are from the same release.

Read the original post:
Home Depot may be latest security breach victim