Home Depot announced Thursday that 53 million customer email addresses were stolen in addition to the credit and debit card details in the massive data breach last September, The New York Times reports. The email addresses could be used in phishing attacks and to send malware. The company also revealed that hackers accessed the retailer’s systems by using a Home Depot vendor’s username and password. Such breaches have prompted a wider call for chip-and-PIN technology, but Wired reports researchers have exposed a flaw in the contactless function. In a letter to lawmakers, retailers are again calling on Congress to pass breach notification legislation. Meanwhile, Hold Security, the consulting firm that has helped expose several breaches, is hiring, and Target has named a new chief risk and compliance officer. (Registration may be required to access this story.)
Full Story