Yorkshire’s Brain Tumour Charity hit by Beacon CRM data breach

Yorkshire’s Brain Tumour Charity has confirmed that it was affected by a data security incident linked to a significant breach at cloud-based CRM provider Beacon CRM.

Beacon CRM is a UK-based cloud customer relationship management (CRM) platform headquartered in Bristol, England. Designed for charities and nonprofit organisations, it provides tools for donor management, fundraising, volunteer coordination, event management, and supporter engagement through a single cloud-based platform. Its clients include Special Olympics Ireland, Wimbledon Guild, Edinburgh Dog & Cat Home, Foothold, GuildCare, Sheffield Hospitals Charity, British Deaf Association and more.

Recently, the BBC reported that YBTC is the latest organisation affected by Beacon’s data security incident. Based in Leeds, UK, YBTC is a regional non-profit dedicated to supporting people affected by brain tumours. It provides essential services for patients and their families, including counselling, peer support groups and financial advice, while also funding innovative local clinical research.

While Beacon confirmed that an “unauthorised third party” had gained access to its systems and exported confidential personal data, YBTC said there was currently “no evidence” that the information had been misused, while investigations into the incident continue.

On 29 July, Beacon experienced a cyber attack in which an unauthorised third party gained access to its systems and exported confidential personal data including names, email addresses, and organisational information. Beacon has confirmed that it does not store any sensitive financial information, such as credit card or bank account information.

Several other organisations have also reported experiencing similar data security incidents linked to the Beacon CRM breach. Among those affected are the British Deaf Association, GuildCare, Saints Foundation, Full Fact, and other charities and non-profit organisations that rely on Beacon CRM to store and manage supporter, donor, or operational information. These organisations have begun notifying affected individuals and reviewing the extent of the impact, with details varying depending on the type of data held within their Beacon CRM systems.