Home Depot Canada customers in Canada received hundreds of emails containing order information of strangers. The emails reveal information such as the customer’s name, order number along with QR code, pick-up store address, and payment receipt containing the last 4 digits of the payment card number. The company has since apologized for the incident and has fixed the issue quickly. The first available pickup day listed on these was Monday (October 26th) The first day of the emails related to online orders was October 24th and 25th, submitted for in-store pickups.
Source: https://www.bleepingcomputer.com/news/security/home-depot-blunder-emails-customer-order-info-to-strangers/