You would be wise if you sent or faxed a letter like this directly to Home Depot. Keep proof that you did so.

Request a copy of the transaction receipt with your signature on it, if they have it. Give them a reasonable time to respond like 30 days.

Notify the individual credit reporting agencies of identity theft and make sure nothing negative goes on your account.