Home Depot reported Thursday it has eliminated the malware that hackers used to compromise its point of sale terminals after thieves stole information from 56 million card accounts.

The popular home improvement retailer also said it upgraded the POS terminals in its U.S. stores to an encrypted system and that it would do the same for its Canadian stores in early 2015. The Canadian stores already take EMV equipped cards.

Contrary to some previous media reports, Home Depot said its hack had been singular in that the malware used had not been seen previously in other attacks. 

Home Depot said the breach took place from April to September of this year.

In addition, the retailer said no PIN data had been compromised and the attack did not impact the company's web sites.

"We apologize to our customers for the inconvenience and anxiety this has caused, and want to reassure them that they will not be liable for fraudulent charges," Frank Blake, Home Depot chairman and CEO, said in a statement. "From the time this investigation began, our guiding principle has been to put our customers first, and we will continue to do so."

NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.