Who Gives A Crap

Security incidents tagged Who Gives A Crap. Newest first.

1 Who Gives A Crap incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

MediumPartly patched
Who Gives A Crap customer names, contact details and total spend exposed through a marketing software vendor
Australian toilet paper brand Who Gives A Crap told customers on Nov 7 2026 that an unauthorized party accessed customer data held by one of its US-based marketing software providers, which it has not named. The provider says the access began on Oct 30, was identified on Oct 31 and was secured on Nov 1, and it told Who Gives A Crap on Nov 6. Data from the Australian, UK and US stores was involved: first and last names, email addresses, phone numbers, mailing addresses and the total amount each customer has spent. Payment details, order details and passwords were not included, Who Gives A Crap accounts were not directly accessed, and Canadian customers' data was not accessed. The company says it does not yet know whether the data was copied or downloaded, has seen no misuse so far, has disconnected the provider and changed access credentials, and has not said how many customers are affected.
Who Gives A Crap customer data (third-party marketing software provider)Since Oct 30, 2026updated Nov 8, 2026, 19:12 UTC