Who Gives A Crap says third-party breach exposed shopper contact data
Original title: Who Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed
Names, emails, phones, addresses and spend totals for UK, US and Australian customers were accessed; payments and passwords were not.
Toilet-paper seller Who Gives A Crap told customers an intruder reached their data through an unnamed US marketing-software provider. The supplier’s systems were accessed on October 30, the intrusion was spotted the next day, and the provider said it secured systems by November 1, but Who Gives A Crap was told only on November 6. Exposed fields are names, email addresses, phone numbers, mailing addresses and total spending. Payment data, order details and passwords were not involved, and customer accounts were not directly accessed. The company disconnected the provider, changed credentials and warned customers about phishing. The UK ICO said it is assessing the company’s report.
Unconfirmed: The company does not know whether the data was copied or downloaded, and the provider remains unnamed.
- Canadian shoppers were not affected, according to the supplier.
- CEO Simon Griffiths said Australian, UK and US stores were in scope.
- The company said it had found no evidence of misuse.
- Griffiths said the firm is engaging regulators as required.
- The provider’s name and the number of affected customers were not disclosed.
Impact: Customer contact details and spending totals accessed
- 1.Watch for phishing emails, texts and calls that use real personal details
- Victims
- Who Gives A Crap
- Organizations
- ICO
- Countries
- United KingdomUnited StatesAustralia
From the original article
2 min read at theregister.comUK shoppers caught up in third-party security mess, and nobody knows whether the data was flushed away
By Carly Page · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.