Home Depot Security Breach: How Brian Krebs Broke The Story Last Week

When Home Depot Inc. (NYSE:HD) announced Tuesday that hackers had breached its security systems in April and stolen customers' debit card and credit card information over several months, it wasonly confirming what Brian Krebs had reported a week earlier.

The former Washington Post reporter-turned-cybercrime-blogger had used his connections to uncover a massive black market of customer information that proved the breach long before the company admitted to it.

Multiple banks say they are seeing evidence that Home Depot stores may be the source of a massive new batch of stolen credit and debit cards that went on sale this morning in the cybercrime underground, wrote thejournalist on his Krebs on Securitybloglast Tuesday. He described how that very morning, a black market online store -- Rescator[dot]cc -- had moved two massive new batches of stolen cards onto the market.

Six days later, Home Depot confirmed publicly it had experienced a credit and debit card data breach at locations in Canada and the United States.

While the company continues to determine the full scope, scale and impact of the breach, there is no evidence that debit PIN numbers were compromised, Home Depot said in its statement.

However, Krebs reported that multiple financial institutions contacted by this publication are reporting a steep increase over the past few days in fraudulent ATM withdrawals on customer accounts.

Its not the first time his reporting has conflicted with an official company line. It was Krebs who first reported themassive data breach at TargetCorp. (NYSE:TGT) stores last year that affected at least 40 million customers and led to the resignation of the chain's CEO amid congressional probes and ongoing litigation.

Krebs, 41, is a former reporter who ran the Post's Security Fix blog from 2005 to 2009. But he wasnt exactly a specialist in the field when he first started to get involved more than a decade ago.

It wasnt until 2001 -- when my entire home network was overrun by a Chinese hacking group -- that I became intensely interested in computer security, he wrote in the About the Author section of his website.

After that incident, I decided to learn as much as I could about computer and Internet security, and read most everything on the subject that I could get my hands on at the time. Its an obsession that hasnt let up.

Excerpt from:
Home Depot Security Breach: How Brian Krebs Broke The Story Last Week