Before a major data breach, Home Depot was slow to raise its defenses against hackers despite alarms from security experts as far back as 2008.