security

UK shoppers caught up in third-party security mess, and nobody knows whether the data was flushed away

Toilet paper purveyor Who Gives A Crap has found itself in a bit of a mess after an intruder accessed customer information through a third-party software provider, leaving the company scrambling to clean up a breach affecting shoppers in the UK, US, and Australia.

In an email sent to affected customers over the weekend, seen by The Register , the loo roll seller warns that personal information was accessed without authorization after a security incident at an unnamed US-based marketing software provider.

The email explains that the intruder gained access to the supplier's systems on October 30. The provider spotted the intrusion the following day and says it secured its systems by November 1, although Who Gives A Crap wasn't told until November 6.…