Home Depot, Goodwill of Southern Indiana latest victims of data breach

Published: .
Updated: .
New information is emerging about yet another retail data breach. Millions of Americans' credit card information may now have been exposed at Home Depot stores.

Goodwill of Southern Indiana also announced this week that almost a dozen of their stores were exposed to malware.

A trip to Home Depot is a weekly event for Robert McMahan. On Wednesday, he planned to pay for a special-order screen door with a credit card.

"Probably credit card. I'm not sure which one, but credit card," McMahan said.

McMahan is one of millions of shoppers whose credit card info could be compromised in the Home Depot data breach, which may go back as far as the spring.

"Here we're looking at four or five months, potentially, of infection. And also during a little bit of an uprise in our economy and home improvement season," said Tom Gorup, security operations manager at Rook Security in downtown Indianapolis.

Gorup says the hackers have one real motive.

"When these attackers get your credit card information, they're looking to sell it. Bottom line, that's where the money is made. You're looking at a few dollars on the credit card, and for a breach like this, a few million, twenty million, it adds up quickly," Gorup said.

The breach is hurtful to southern Indiana Goodwill stores.

"I am angry and I am appalled," said Candice Barksdale, CEO of Goodwill of Southern Indiana.

Eleven locations were using a third-party vendor attacked by malware. It allowed criminals to easily snag payment card information.

"I'm just appalled that some evil person would want to do something that would hurt the clients of Goodwill," Barksdale said.

Barksdale says the company is no longer using that vendor.

Gorup says the hackers found a way to exploit weak spots in the system, then repeat the crime.

"It's fairly complex, but it's being reused and repackaged and redistributed for these types of attacks," Gorup said.

McMahan says he is not changing how often he shops, but he may be looking for a new way to pay.

"It's time to get new cards, it's time to get a new system," McMahan said.