ABC News reports that Australian retailer Who Gives A Crap has told customers some of their personal information was accessed in a security incident at a US-based marketing software provider. Cyber Daily separately reported that it reviewed the customer notification email sent by chief executive Simon Griffiths. The company said the affected data related to its Australian, UK and US stores, and customers who may have been affected were emailed on Saturday, November 7.
The information involved first and last names, email addresses, phone numbers, mailing addresses and the total amount customers had spent with the company. Chief executive Simon Griffiths said payment details, order details and passwords were not involved, and that customer accounts were not directly accessed. The company said it had no evidence of misuse so far. The provider reported that personal information from Canadian customers was not accessed.
According to the company’s statement, the unauthorised access began on October 30, was identified on October 31 and was secured on November 1. Who Gives A Crap said it learned about the incident on Friday, November 6, and did not know whether the information had been copied or downloaded. The company has not disclosed how many customers may be affected or named the marketing software provider.
Who Gives A Crap said it had disconnected the provider from its systems, changed access credentials and was working with the provider to determine whether further steps were needed. The company said it would engage with relevant regulators as required and update customers if it learned anything new that affected their information.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
