Who Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed
Who Gives A Crap customer data exposed via third-party marketing software provider.
Toilet paper company Who Gives A Crap experienced a data breach affecting UK, US, and Australian customers due to a security incident at an unnamed US-based marketing software provider. Personal information including names, email addresses, phone numbers, mailing addresses, and spending history was accessed, though payment details and passwords were not compromised. The company is working with regulatory authorities and advising customers to be vigilant against phishing attempts.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Who Gives A Crap?
Get an email when a new story names Who Gives A Crap, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonWho Gives A Crap's data breach was not caused by a failure in their own systems, but by a security incident at an unnamed third-party marketing software provider — a classic supply chain risk. Customer personal data including names, addresses, phone numbers, and spending history was exposed, demonstrating that sensitive data shared with vendors carries the same risk profile as data held internally. This matters because organisations are only as secure as their weakest third-party link, and customers bear the consequences regardless of where the breach originates. Regulatory authorities are now involved, highlighting the growing legal accountability businesses face for data processed by their supply chain partners.
What helps against this
How we list vendors- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.