Cyber security incident – Beacon donation CRM system
Protecting your personal information is incredibly important to us, and we take our responsibility to look after it seriously.
We’re writing to let you know about a recent cyber security incident involving Beacon CRM, the database system SCCCC uses to manage information about donors and supporters.
Beacon informed us about the incident on 3 August 2026. As a precaution, we are contacting individuals whose information may have been affected.
At this stage, there is no evidence that personal information connected with this incident has been
published or misused, and we are not aware of any fraud or harm affecting SCCCC supporters as a
result.
What happened?
Beacon identified unauthorised access to parts of its systems on 29 July 2026.
Beacon has since confirmed that an unauthorised third party was able to access and download copies of database backups. Beacon is continuing to investigate the incident and assess its potential impact, and has advised organisations using its platform that information held within Beacon may have been affected.
What information may be involved?
The information SCCCC holds about you in Beacon may include:
- Your name and contact details
- Your postal address, email address and telephone number
- Records of donations you have made
- Your communication preferences
- Records of your contact or involvement with SCCCC
- Gift Aid information, where applicable
Payment card details and online banking passwords are not stored within Beacon and have not been
affected by this incident.
A letter of this story is available to download here.
