Home Depot confirms third-party data breach exposed employee info

Home Depot confirmed that a third-party SaaS vendor mistakenly made public a sample of corporate data for about 10,000 employees (names, work email addresses, and user IDs), which threat actor IntelBroker posted to a hacking forum. While the leaked information is limited and not highly sensitive, it can be used for targeted phishing campaigns aimed at stealing credentials or enabling further attacks; employees should report suspicious credential-requesting emails to IT.