Who Gives A Crap warns shoppers after vendor security breach exposes customer details

Toilet paper brand Who Gives A Crap is alerting customers that an unauthorized intruder accessed personal data through an unnamed US-based marketing software vendor. The breach affected customers who used the company's Australian, UK, and US online stores, while Canadian shoppers were not impacted. The accessed data includes customer names, email addresses, phone numbers, mailing addresses, and lifetime spending totals. [1][2]

Payment information, passwords, and order details were not involved, and the company confirmed that customer accounts were not directly accessed. According to the supplier, the intruder entered the systems on October 30, the issue was detected on October 31, and the environment was secured by November 1. Who Gives A Crap stated it was not informed until November 6, after which it disconnected the vendor and rotated its credentials. [1][2]

Who Gives A Crap says it does not yet know if the records were copied or downloaded, and it has not found evidence of misuse so far. CEO Simon Griffiths confirmed the business is engaging with regulatory authorities, including the UK Information Commissioner's Office, while warning customers to remain vigilant against phishing messages and scams attempting to exploit their real details. [1][2]