Home Depot said: "breach lasted roughly 3 weeks", "cyber criminals ... stole an estimated 56 million debit and credit card numbers from its customers between April + September 2014" http://krebsonsecurity.com/2014/09/home-depot-56m-cards-impacted-malware-contained/