Ethical Hacking News
Who Gives A Crap, a toilet paper manufacturer, has suffered a data breach after an unauthorized access to customer information through a third-party software provider. The incident has left customers in the UK, US, and Australia on high alert, and raises questions about the responsibility of third-party software providers in protecting customer data.
Customer data was breached at a US-based marketing software provider, exposing customer names, email addresses, phone numbers, and spending information. The breach occurred on October 30, 2026, and was not detected until November 1, with the provider securing its systems by November 6. Who Gives A Crap Limited was not informed of the breach until November 6, raising questions about the supplier's response and communication. Payment information, order details, and passwords were not involved, but customers' accounts were not directly accessed, sparking concerns about data misuse. Who Gives A Crap has taken steps to mitigate the breach, including disconnecting the provider, changing access credentials, and warning affected customers. The incident highlights the importance of data security and the need for companies to prioritize the protection of customer data, particularly when third-party software providers are involved.
The recent incident at Who Gives A Crap, a toilet paper manufacturer, highlights the vulnerability of customer data when third-party software providers are involved. The incident, which occurred in October 2026, saw an unauthorized breach of customer information at an unnamed US-based marketing software provider. The breach, which exposed customer names, email addresses, phone numbers, mailing addresses, and total spending with the company, has left customers in the UK, US, and Australia on high alert.
According to an email sent to affected customers, the intruder gained access to the supplier's systems on October 30, 2026, and was not detected until November 1. The provider secured its systems by November 6, although Who Gives A Crap was not informed until November 6. The delay in notification has raised questions about the supplier's response to the breach and their communication with the affected company.
The exposed information, which includes customers' names, email addresses, phone numbers, mailing addresses, and total spending with the company, has sparked concerns about the potential misuse of this data. While payment information, order details, and passwords were not involved, customers' accounts were not directly accessed. However, the question of whether the intruder actually made off with the data remains a pressing concern.
Who Gives A Crap has since disconnected the provider from its systems, changed access credentials, and begun warning affected customers to watch out for suspicious emails, texts, calls, and other unsolicited communications. The company has also issued a statement confirming that the incident affected customers across its Australian, UK, and US stores, but not those in Canada.
The incident has also raised questions about the responsibility of third-party software providers in protecting customer data. While Who Gives A Crap has taken steps to mitigate the breach, the supplier at the center of the incident remains a mystery, and the company has not identified the software provider or disclosed how many customers were affected.
In response to the breach, the UK's Information Commissioner's Office (ICO) has confirmed that Who Gives A Crap Limited has reported an incident and is being assessed. The ICO's response highlights the importance of data protection and the need for companies to take proactive measures to protect customer data.
The incident at Who Gives A Crap serves as a reminder of the importance of data security and the need for companies to prioritize the protection of customer data. As the use of technology continues to grow, the risk of data breaches and cyber-attacks will only continue to increase. Companies must take proactive measures to protect customer data and ensure that third-party software providers are held accountable for their role in protecting this data.
In conclusion, the exposure of customer data at Who Gives A Crap highlights the vulnerability of customer data when third-party software providers are involved. While the company has taken steps to mitigate the breach, the incident serves as a reminder of the importance of data security and the need for companies to prioritize the protection of customer data.
Related Information:
https://www.ethicalhackingnews.com/articles/Exposure-of-Customer-Data-at-Toilet-Paper-Maker-Who-Gives-A-Crap-A-Breach-of-Third-Party-Security-ehn.shtml
https://www.theregister.com/security/2026/11/09/who-gives-a-crap-hackers-apparently-after-toilet-paper-makers-customer-data-exposed/5308419
Published: Mon Nov 9 09:48:41 2026 by llama3.2 3B Q4_K_M
