After dinner, I was checking my emails when I came across 6 emails from Home Depot stating that my address had been changed. Then I had one thanking me for placing an order on Home Depot dot com.
The first thing I did was go online & change my password. There were 2 additional address on the account. I deleted those. Then I checked to see if I had any credit cards stored on the site. I did not.
Next I tried to call Home Depot to report this using the phone number included in the address change emails. The following statement was in the address change emails. If you did not make these changes, please contact our Help Center immediately at 1-800-466-3337. The problem is that this must be the only phone number for the Home Depot Help Center. I was given options from job applications to store locations & hours & everything in between. But there was no option to report fraud. It took me 3 phone calls & over 30 minutes to get a real person on the line.
Once I got a real person, they were great help. I found out that the credit card they used was not mine & that I did the right thing by changing my password. The order was for 2 solar generators at $515.03. After tax & shipping, the total was $1150.31.
Home Depot told me that the order had already shipped. They said they were flagging the shipment.
As I am typing this & got a shipping confirmation with a tracking number.
This must be a first attempt at fraud. It took them 6 tries to enter the address they wanted to ship to & they did not change my email address to theirs. They did not change the password. All of those were a surprise to Home Depot.
I asked HD why they did not have an easy way to report fraud. They did not know.
I have had fraudulent charges on my credit cards, but this is the first time I have had an online vendor account hacked.