Who Gives A Crap has told customers in Australia, the UK and the US that an unauthorized party accessed their details through a third-party marketing software provider, according to ABC News. The company has not named the US-based provider, and its own customer accounts were not directly accessed.
The access began on October 30, was spotted on October 31 and was shut off on November 1, and the company does not know whether the data was copied or downloaded. Exposed information includes first and last names, email addresses, phone numbers, mailing addresses and the total amount each customer has spent. Payment details, order details and passwords were not involved, and Canadian customers’ data was not accessed. The number of affected customers has not been given.
The company cut the provider off from its systems entirely, changed access credentials and is working with the provider on its investigation. It says it has seen no evidence of misuse so far and will involve regulators if needed. Customers were emailed on Saturday, a day after the company learned of the breach, and CEO Simon Griffiths apologized. Customers are advised to be wary of unexpected emails, texts, calls or mail and to verify any message claiming to come from the company before responding.