Manchester HIV charity George House Trust warns users of data breach

George House Trust, a Manchester-based charity that provides support, advice and information to people living with HIV, has notified users that sensitive and personal health information may have been accessed in a data breach. The organization said hackers downloaded material from a database but that the information had not been published.

The breach forms part of a larger cybersecurity incident that could affect as many as 1,500 charities across the United Kingdom. It is not yet clear how many individuals connected to George House Trust have been affected.

According to the notification sent to users, the compromised database contained personal details including home addresses, email addresses, telephone numbers, and notes and records documenting users’ engagement with the charity. George House Trust said there was no sign that any of the data had been misused at this time.

The incident centers on Beacon, a technology company whose database system is used by more than 1,000 charities nationwide. Beacon said the breach took place at the end of July and that it immediately brought in external cybersecurity experts to help contain the incident and investigate its scope. The company said it was supporting all organizations affected by the breach.

George House Trust said Beacon notified it of the breach on Aug. 3, but the charity did not inform affected users until roughly three weeks later. The organization said it delayed notification until it had reached a fuller understanding of what had occurred. George House Trust, founded in 1985, said it has since reviewed the data held by Beacon and, in cases where sensitive information was identified, has sought to inform the individuals concerned. The charity said it continues to investigate the breach and is taking all appropriate steps in response.