A Canadian is leading a $500 million class-action lawsuit against Home Depot following its data breach in which up to 56 million US and Canadian credit cards were stolen.

Stephen Lozanski of Richmond, Ontario filed the suit, claiming that $8000 was charged to his credit card without his knowledge. Open to all Canadians affected by the breach, the lawsuit claims that Home Depot in Canada and the US "failed to adequately safeguard certain personal information, financial data and usage data belonging to the plaintiff and other class members."

Home Depot was negligent because it failed to inform Canadians of the loss of their sensitive personal information, said a court filing against the company. It also attacks the company for failing to use adequate firewalls, encryption, and protection against known vulnerabilities.

"They failed to heed warnings about the inadequate security of their computer systems, including the point of sale systems, and about how same could be breached and compromised by computer hackers," the complaint continued.

The document, filed through law firm McPhadden Samac Tuovi LLP, says that over one million affected Canadians may be eligible for inclusion in the suit.