
Aussie recycled toilet paper brand Who Gives a Crap discloses data breach - Cyber Daily
The Australian recycled toilet paper brand Who Gives a Crap has informed customers that their personal data was accessed without authorisation in a security incident at a US marketing software provider.
The company, which produces recycled toilet paper, tissues, and kitchen towels, began notifying affected customers late on November 7. The breach was detected on November 1, and the impacted systems were secured by that date.
I’m writing to inform you that your personal information was accessed without authorisation in a security incident at one of our marketing software providers.
Griffiths stated that the personal information involved was a customer's first and last name, email address, phone number, mailing address, and the total amount spent with the company.
The company has confirmed that the data breach also compromised customer information in the United States and the United Kingdom. Data belonging to Canadian customers appears to be unaffected.
The impacted US-based software provider has been disconnected from Who Gives a Crap’s customer systems. The two companies are working together to understand the extent of the breach.
Who Gives a Crap said it would be engaging with the relevant regulatory authorities, as required. As of the time of writing, no threat actor has claimed responsibility for the attack.
I'm sorry this happened. Our team is doing everything we can to monitor the situation and strengthen our defences against breaches.
The company will update customers if it learns anything new that affects them or their data. The investigation is ongoing.