Who Gives A Crap? Hackers, apparently, after toilet paper maker’s customer data exposed

Who Gives A Crap says an intruder accessed customer information through a breach at an unnamed US-based marketing software provider. The incident affected shoppers in the UK, US and Australia, and raises questions about how quickly the supplier informed the company and whether the data was copied.

The supplier detected the intrusion on 31 October and said it had secured its systems by 1 November; Who Gives A Crap was notified on 6 November. Names, contact details, postal addresses and total spending were exposed, but payment information, order details, passwords and customer accounts were not involved. The company says it has found no evidence of misuse, disconnected the provider and warned customers to watch for convincing scam messages; the number affected is undisclosed.