Beacon CRM cyber security incident

We are writing to inform our supporters about a cyber security incident involving Beacon, the customer relationship management (CRM) system used by Beaumond House Hospice Care.

On 29 July 2026, Beacon became aware of a potential cyber security incident and immediately engaged external cyber security specialists to investigate and secure its systems. Beaumond House was notified by Beacon on 3 August 2026.

Based on Beacon's current understanding, unauthorised access was gained to its systems using compromised credentials. As part of its ongoing investigation, Beacon has identified that copies of customer database backups were made. While it has not yet been conclusively confirmed that information was taken from Beacon's systems, the evidence gathered so far suggests that these copies were likely downloaded.

What is happening now?

Beacon has advised us that:

• Its investigation is ongoing and is being supported by external cyber security specialists.

• It is working with law enforcement agencies and relevant regulators where required.

• Ongoing monitoring has not identified any misuse of information involved in this incident.

• Additional security measures have been implemented to further protect its systems.

What does this mean for our supporters?

At this stage, the investigation remains ongoing and we are continuing to work closely with Beacon and the ICO to understand the full scope and impact of the incident.

We want to reassure you that Beaumond House does not store card payment information on Beacon CRM. Donations via card payments are processed through specialist providers.

Our volunteering, patient and client records are stored separately and have not been affected by this incident. Any information held in Beacon relates to interactions and engagement with us as a supporter, donor or fundraiser only.

While there is currently no evidence of misuse of information connected to this incident, we encourage supporters to remain vigilant for unexpected emails, phone calls, text messages or other communications that request personal information or sensitive details.

As a general precaution, it is good practice to:

• Use strong, unique passwords for online accounts.

• Enable multi-factor authentication where available.

• Be cautious of unexpected links or attachments.

• Verify requests for personal or financial information before responding.

Our commitment

We understand that news of this nature may be concerning. Protecting the information entrusted to us is extremely important.

We will continue to monitor the situation closely and work with Beacon as their investigation progresses. If new information comes to light that affects our supporters, we will publish updates as soon as possible.

Beacon is also providing regular updates and answers to frequently asked questions here: https://www.beaconcrm.org/incident-faqs

We are committed to supporting anyone who may have been affected by the recent Beacon CRM data breach. If you have any questions for us or would like more information about Beacon, support or assistance in protecting your data please submit an enquiry here: Beacon CRM Enquiry Form

Alternatively, you can contact us directly on 01636 610 556 or info@beaumondhouse.co.uk

Last updated: 10 August 2026