Who Gives A Crap? Hackers, apparently, after toilet paper maker's customer data exposed

Toilet paper purveyor Who Gives A Crap has found itself in a bit of a mess after an intruder accessed customer information through a third-party software provider, leaving the company scrambling to clean up a breach affecting shoppers in the UK, US, and Australia.

In an email sent to affected customers over the weekend, seen by The Register, the loo roll seller warns that personal information was accessed without authorization after a security incident at an unnamed US-based marketing software provider.

The email explains that the intruder gained access to the supplier's systems on October 30. The provider spotted the intrusion the following day and says it secured its systems by November 1, although Who Gives A Crap wasn't told until November 6. It's unclear why the supplier sat on the bad news for another five days before passing it on.

The exposed information includes customers' names, email addresses, phone numbers, mailing addresses, and total spending with the company. …