JACKSON, Miss. (WJTV) – On Tuesday, Attorney General Lynn Fitch announced Mississippi, along with the attorneys general of 45 other states and the District of Columbia, obtained a $17.5 million settlement against Home Depot.
The settlement comes after a 2014 data breach, which exposed the payment card information of 40 million Home Depot customers nationwide. Mississippi will collect $147,874.48 through the settlement.
“When companies fail to protect personal data, they leave millions of consumers vulnerable to identity theft and misuse of their personal information,” said Fitch. “This settlement highlights the importance of implementing procedures to protect consumers’ sensitive personal information and every business’ duty to do so.”
The breach occurred when hackers gained access to Home Depot’s network and deployed malware on its self-checkout point-of-sale system. The malware allowed the hackers to obtain the payment card information of customers who used self-checkout lanes at Home Depot stores throughout the U.S. between April 10, 2014 and September 13, 2014.
In addition to the settlement, Home Depot agreed to implement and maintain a series of data security practices designed to strengthen its information security program and safeguard the
personal information of consumers. Specific security provisions agreed to in the settlement include:
- Employing a duly qualified Chief Information Security Officer reporting to both the Senior or C-level executives and Board of Directors regarding Home Depot’s security posture and security risks;
- Providing resources necessary to fully implement the company’s information security program;
- Providing appropriate security awareness and privacy training to all personnel who have access to the company’s network or responsibility for U.S. consumers’’ personal information;
- Employing specific security safeguards with respect to logging and monitoring, access controls, password management, two factor authentication, file integrity monitoring, firewalls, encryption, risk assessments, penetration testing, intrusion detection, and vendor account management; and
- Consistent with previous state data breach settlements, the company will undergo a post settlement information security assessment, which in part will evaluate its implementation of the agreed upon information security program.
- Biden picks Rachel Levine as assistant health secretary
- Thief berated mom for leaving kid in car he stole, police say
- Mets general manager admits sending explicit texts and images to female reporter, report says
- California becomes first state to top 3 million virus cases
- President Trump’s final hours in office expected to be non-traditional