Home Depot says 56 million payment cards and 53 million email addresses were compromised. Attackers leveraged a third-party vendor’s username and password in order to access the network. The retailer has stated previously that they believe the malware used in the attack was active on their POS network between April and September of 2014. Home Depot has stated that they plan to improve their overall security posture, but they are focusing on the public facing aspects first. Customers who used a payment card at a Home Depot store in 2014, from April on, are eligible to receive identity protection services at no cost.”]