Beacon CRM Breach Exposes Sensitive Records at UK HIV Charity

Manchester-based HIV charity George House Trust warned service users that attackers may have accessed and downloaded sensitive personal and health-related records from its systems. Exposed information may include contact details, home addresses, and case notes documenting individuals’ engagement with the charity; the organization said it had found no evidence that the data had been published or misused.

The incident was traced to a breach of Beacon, a technology and CRM provider serving more than 1,000 UK charities and non-profits. Beacon said the intrusion occurred at the end of July and notified George House Trust on August 3; the charity subsequently reviewed the breach and alerted affected individuals after identifying sensitive records. The attacker, intrusion method, and number of affected people have not been disclosed, while the wider Beacon incident could affect up to 1,500 charities.