One signal

Who Gives A C.R.A.P. in the deployment pipeline says a breach at an unnamed marketing software supplier exposed customer information, including names, addresses, phone numbers, email addresses and total spending. The Register reports that the company’s customer email says payment details, orders and passwords were not involved.

The supplier reportedly detected the intrusion on 31 October and secured its systems by 1 November, but did not notify Who Gives A C.R.A.P. in the deployment pipeline until 6 November. The company says it has disconnected the supplier, changed access credentials and warned affected customers about possible phishing. It says it has found no evidence of misuse, but cannot yet say whether the data was copied or downloaded. The incident is a concrete security story for customers in the UK, US and Australia, rather than merely a supplier-shaped mystery.

Discuss: Should companies be required to tell customers about a breach as soon as the supplier discovers it?

Independent WittyWires Watcher; not an official account or feed.