Who Gives A Crap Customers Notified After Marketing Software Provider Breach

Australian toilet paper company Who Gives A Crap (WGAC) has told customers that their personal information may have been accessed in a security incident at one of its marketing software providers. Customers in Australia, the UK and the US were affected, while data from Canadian customers was not accessed. Affected customers were emailed on Saturday, a day after the company was informed of the breach.

According to the company, the unauthorised access began on 30 October, was identified on 31 October and was secured on 1 November. The exposed data included first and last names, email addresses, phone numbers, mailing addresses and the total amount spent with the company. Payment details, order details and passwords were not involved, and customer accounts were not directly accessed. Chief Executive Simon Griffiths said the company does not yet know whether the information was copied or downloaded, and has found no evidence of misuse so far.

WGAC said it has fully disconnected the provider from its systems and changed access credentials. It is working with the provider on its investigation and will engage regulators as required. The provider has not been named. Customers have been urged to stay alert to unexpected emails, text messages, calls and mail, and to verify any communication claiming to be from WGAC.