A recent data breach at Who Gives a Crap exposed customer details through a third-party marketing software vendor, affecting users in Australia, the UK, and the US.
The incident highlights third-party risk management challenges when external software providers suffer security incidents.
Who is affected and when did it happen?
The breach affects customers living in Australia, the United Kingdom and the United States. The company was notified of the incident on November 6 and the next day sent an email to affected customers, advising them to be extra careful.
The database access occurred between October 30 and November 1. At present, it remains unclear whether the perpetrators recorded or copied the data.
What evidence fell into the wrong hands?
The elements exposed include:
- Full name
- Email address
- Phone number
- Postal address
- The total amount each customer had spent since the company's founding in 2012
According to the company, payment information, additional order details, and account passwords remained secure and were not accessible.
What the company says
The company has not yet identified any direct impact on user accounts, nor are there any indications that the data was used by the perpetrators.
↳
READ ALSO
HACKS.GR / RELATED
Cyber Attacks & Data Breaches
Attack on Keplr users: How to tell if your money was saved
↗
The company's co-founder and CEO, Simon Griffiths, publicly apologized to customers and assured that his team was strengthening the security of its systems.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)