Australian toilet paper company Who Gives A Crap has confirmed a data breach affecting customers in Australia, the UK and the US. The breach, which occurred at a US-based marketing software provider used by the company, exposed customer names, email addresses, phone numbers, mailing addresses and total spend with the company.
Breach Details
The breach was detected on 31 October and secured by 1 November. The company has stated that payment details, order details and passwords were not involved. However, the breach did expose customer names, email addresses, phone numbers, mailing addresses and total spend with the company.
Impact and Response
The company has apologised for the breach and is taking steps to strengthen its defences against future breaches. Customers have been advised to be cautious of unexpected emails, texts and calls, and to verify any communication claiming to be from Who Gives A Crap.
Practical Response
Australian healthcare organisations and Melbourne businesses should review their own third-party data handling practices to ensure they are taking adequate steps to protect customer data. This includes reviewing contracts with third-party providers, ensuring that data is handled in accordance with relevant regulations, and implementing robust security measures to prevent similar breaches.
Talk to Podium IT
Need a clear next step?
Send a secure enquiry and tell us what you are planning. Please do not include passwords, patient information or other sensitive data.
General information only. It is not legal, privacy or compliance advice; requirements should be assessed for your organisation.