Home Depot, the largest home improvement retailer in the United States, was caught up in a supply chain breach affecting its Salesforce platform in 2025. A threat group calling itself "Scattered LAPSUS$ Hunters" claimed responsibility and released a sample of the stolen data on October 3, 2025, with the full dataset reportedly scheduled for release on October 10. Home Depot was one of approximately 39 organizations listed on the group's dark web leak site. The incident exposed records belonging to roughly 10.5 million customers. The exposed data includes names, email addresses, phone numbers, and full home addresses including city, state, postal code, and country. For ordinary customers, this combination signals likely homeownership and ongoing property activity, details that make targeted scams more convincing. A subset of the records was dedicated to government employees, including federal, state, and county workers. Those records appear to contain personal home addresses rather than work addresses, exposing the physical locations of individuals whose government affiliation is also visible in the data. That combination creates heightened risk for identity fraud, phishing, and physical targeting. Home Depot has not made detailed public statements about its specific response to this campaign. No regulatory actions or breach notifications have been publicly confirmed as of the time of this writing. Affected individuals, particularly government workers whose home addresses were included, should be alert to contractor-themed phishing attempts, delivery impersonation scams, and unsolicited contact that references their address or home improvement activity.

Home improvement retailers collect customer identity, contact details, addresses, payment-adjacent data, order history, loyalty records, and contractor-linked transactions across retail systems.

Home Depot has focused on its professional customer segment as a key growth driver, investing in supply chain improvements and digital tools for contractors and trade professionals. The company acquired SRS Distribution, a specialty distributor serving roofing and landscaping trades, in 2024 for approximately $18.25 billion — its largest acquisition. Leadership has maintained focus on the Pro and online segments to offset softer consumer DIY demand.