Keeping You Informed: Beacon CRM Security Incident Update
IT Incident by Beacon
We wanted to let you know that Beacon CRM (Customer Relationship Management), the external contact database used by Special Stars Foundation and many charities across the UK, has experienced a cyber security incident.
What has happened?
Beacon, our CRM software provider, became aware that they have experienced a cyber-security incident. They immediately engaged external cyber-security experts to help investigate and secure their systems. Their current understanding is that compromised credentials were used to gain access to Beacon, and copies of database backups were made.
We do not know exactly what Special Stars Foundation information, if any, may have been affected.
What information may be involved?
The information that may have been accessed, potentially includes name and contact details and your relationship to Special Stars Foundation, for example if someone is a supporter, volunteer or service user.
There is currently no evidence to suggest that anyone’s personal information has been misused. Our Beacon records do not routinely contain bank card details.
What are we doing to address the breach?
Protecting your personal information is extremely important to us. We are continuing to work with Beacon to establish exactly what information may have been accessed. Since being notified of the incident, we have:
- Reviewed the information that may have been affected;
- Assessed the potential risks and taken immediate steps to prevent further unauthorised access;
- Considered our legal obligations under data protection law, including notifying the Information Commissioner’s Office (ICO)
- Continued to monitor developments as Beacon’s investigation progresses;
What should you do?
We are not currently aware of any misuse of your personal information. However, as a precaution, we recommend that you:
- Remain vigilant for suspicious emails, telephone calls, texts or correspondence claiming to be from Special Stars Foundation or any trusted third party.
- Exercise caution before clicking on links or opening attachments from unexpected communications.
- Never disclose passwords, verification codes or financial information in response to unsolicited requests.
What happens next?
We are committed to keeping you informed. If our investigation identifies any further information that may affect you, we will provide an update as soon as possible. In the meantime, if you have any questions or concerns, please don’t hesitate to contact info@specialstarsfoundation.co.uk
We are incredibly grateful for your trust in Special Stars Foundation and your ongoing support. We never take your support for granted and I am deeply sorry for any concern this incident may cause.
Kind regards
Louise Miles, CEO Special Stars Foundation