Someone randomly orders stuff from HomeDepot using my email. Different address and different (not mine) payment methods.

Real orders. Real stuff. HomeDepot doesn’t do a thing about this. Either a glitch and user data mixup or some advanced scam