The Home Depot Inc. said Thursday that hackers stole 53 million email addresses in addition to payment-card data.
It said the hackers accessed its network with a vendor’s username and password.
The Atlanta-based home-repair retailer in September disclosed a massive data breach that involved 56 million debit and credit cards between April and September.
The company said Thursday that the file containing the email addresses did not contain passwords or other sensitive personal information, but customers should be on guard against phishing scams that might trick them into sharing personal information. It is notifying affected customers in the U.S. and Canada.
Home Depot is one of several retailers that have reported large hacks over the past year.