iiinova — where your digital self keeps evolving

Replies

Owen Boswarva @owenboswarva.bsky.social · 05/08/2026

UK charities count the cost of Beacon CRM cyberattack www.theregister.com/security/202... Beacon CRM incident statement www.beaconcrm.org/incident + FAQs www.beaconcrm.org/incident-faqs (not on their homepage or showing up directly in search results, funny that) #dataprotection #cybersecurity

Beacon CRM has confirmed it was hit by a cyberattack that exposed data belonging to a growing list of UK charities.

The company, which markets its software to charities and has more than 1,500 customers, said its investigation remains ongoing. However, it appears that a substantial amount of customer data was copied, and Beacon is warning users to assume everything they stored on the platform was downloaded.

"Currently, our investigation has confirmed that copies of database backups were made and likely downloaded by the unauthorized third-party," it said on Tuesday. "We have evidence that shows a spike in activity during the incident timeline symptomatic of data leaving our systems.

3:25 PM · Aug 5, 2026

251

Owen Boswarva @owenboswarva.bsky.social · 05/08/2026

El Reg has mentioned Molly Rose Foundation and other organisations. I gather Hansard Society, LawCare, Centre for Sustainable Energy, DocBike, Bristol Avon Rivers Trust, and Katharine House Hospice have also identified themselves as Beacon CRM customers potentially affected. Presumably many others.

The Scottish Council for Voluntary Organisations (SCVO) did not identify individual victims, but said many Scottish charities use Beacon CRM.

Other charities confirmed to be affected include:

● London-based homeless charity The Upper Room
● Chiswick House and Gardens Trust
● Victim Support (no victim data affected)
● Macmillan Cancer Support Jersey, per the Bailiwick Express
● Young person's charity Motiv8, according to Portsmouth News
● UK-Med

PANS PANDAS UK, a children's charity for those with the PANS and PANDAS conditions, said that it was unsure whether its data had been affected, having abandoned Beacon earlier in the year.

English National Ballet told The Register: "As one of Beacon CRM's customers, English National Ballet was informed on 3 August 2026 that an unauthorised third party had gained access to their system.

"English National Ballet has not received confirmation that our data was directly affected, however as a precaution we have informed all contacts as soon as possible that their data could potentially have been accessed. ENB take data privacy extremely seriously. We are doing everything we can to reduce the risk of anything similar happening in the future."

231

Charlie Radclyffe @charlierad.bsky.social · 05/08/2026

↪ Replying to @owenboswarva.bsky.social

The ICO definitely wouldn't have been expecting to receive 1500+ updates this month!!

010