7News.Au Who Gives A Crap Data Breach Exposes Customer Information
Article Content
- •Customer data accessed included names, emails, and addresses, but not payment info.
- •Breach occurred at a US-based marketing software provider used by WGAC.
- •Customers are advised to be cautious of phishing attempts using their real details.
Who Gives A Crap (WGAC) confirmed that customer data was accessed without authorization due to a breach at a US-based marketing software provider. The breach, which began on October 30 and was detected on October 31, involved customer names, email addresses, phone numbers, mailing addresses, and total spending with the company. However, payment details and passwords were not compromised. Customers in Australia, the UK, and the US were affected, while Canadian customers' data remained secure. WGAC has disconnected the affected provider and changed access credentials. The company is currently investigating the incident and has urged customers to remain vigilant against potential phishing attempts using their personal information. No evidence of misuse has been reported so far.
Ask AI about this cluster
Answers cite the sources they use
More articles in this cluster (3)
Following this threat?
Track Who Gives A Crap in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What customer data was exposed?
Is there evidence of misuse of the data?
What should affected customers do?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…