Home Depot confirms third-party data breach exposed employee info