Customer data could have been stolen from nearly all of Home Depot Inc’s stores in the United States, according to new information released on Wednesday by security website Krebs on Security.
Brian Krebs, who runs the website, had said on Tuesday that the problem could affect all of Home Depot’s 2,200 stores in the United States. On Wednesday, he said he found new evidence that the breach first surfaced on the website Rescator, where customer credit cards were listed according to store Zip code.
These codes showed a 99.4% overlap with Home Depot stores, he said.
In all, there were 1,939 codes corresponding to Home Depot store locations, Krebs’ website said. It is not yet clear how many customers were impacted.
Home Depot has not confirmed that a breach occurred. It has said it is investigating “unusual activity” and is working with its banking partners and law enforcement to investigate.
The FBI declined to comment on Wednesday.