Per The Register, toilet paper retailer Who Gives A Crap has confirmed a security breach involving a third-party marketing software provider that exposed the personal information of customers in the United Kingdom, the United States and Australia.
The unauthorized access occurred on Oct. 30 when an intruder breached the unnamed supplier's systems. Although the provider detected the incident on Oct. 31 and secured its network by Nov. 1, Who Gives A Crap was not notified until Nov. 6. The exposed data includes customer names, email addresses, phone numbers, mailing addresses and total spending history. The company stated that payment details, passwords and specific order information remained secure. Chief Executive Officer Simon Griffiths confirmed that Canadian customers were not affected by the incident. In response, the retailer has terminated its connection with the software provider and updated its access credentials. The company is currently advising affected shoppers to remain vigilant against potential phishing attempts or fraudulent communications. While the retailer has reported the incident to regulatory authorities, including the Information Commissioner's Office in the United Kingdom, the identity of the software supplier remains undisclosed. The company has found no evidence of data misuse but continues to investigate whether the information was copied or downloaded during the breach.
Source: The Register
