Home Depot is confirming that its payment data systems have been breached, and says the hack could affect customers who used cards at U.S. and Canadian stores.
The largest U.S. home improvement chain says there is no evidence debit card PINs were compromised, and no evidence online customers or shoppers at stores in Mexico are affected.
The Atlanta company says its investigation is focused on the months since April.
Home Depot Inc. said last week that it was working with banks and law enforcement to investigate a potential hack.
Hackers have broken security walls for many retailers in recent months, including Target, grocer Supervalu, restaurant chain P.F. Chang's and the thrift store operations of Goodwill.