Home Depot says hackers who stole payment-card details of millions of customers also stole 53 million email addresses.
The retail giant said hackers accessed its network with a vendor’s username and password between April and September 2014.
The company had previously revealed that 56 million debit and credit card details were also stolen in the hack.
Analysts say it is one of the largest data breaches on record, surpassing a similar incident at retailer Target.
Home Depot insisted on November 6 that the file containing the email addresses did not contain passwords or other sensitive personal information.
It also warned customers to be on guard against further phishing scams that might trick them into sharing personal information.
Customers that have been affected in the US and Canada will be notified and offered credit monitoring, the company added.
The latest update came just weeks after Home Depot disclosed the data breach, saying 56 million credit and debit card details were taken.
The company said it was still investigating the incident.
The incident follows a similar case involving Target, which was targeted by hackers in December 2013.
Target said payment and personal data from as many as 70 million customers was taken.
[youtube XGHn1tDYKsA 650]