Cyberattack on UK Charity CRM Beacon Exposes Cultural Institutions' Data

Last week, Beacon, a CRM platform based in the UK that caters to charities, announced it suffered a cyberattack, which allowed an unauthorized third party to access database backup copies. Serving various cultural organizations like Chiswick House and Gardens, the English National Ballet, and York Museums Trust, Beacon urged users to consider that all data on their site, including attached files, might have been viewed or downloaded. Clients Studio Voltaire and the Foundling Museum informed their supporters via email that the compromised data includes full names, addresses, email contacts, phone numbers, membership details, and order information. Although the data is encrypted, it may still be decrypted. Both organizations confirmed no bank or payment card details were involved. The Information Commissioner's Office (ICO) is aware of the situation and is in communication with Beacon Apps Ltd. Meanwhile, the National Cyber Security Centre has issued guidance for those impacted by data breaches, underscoring the need for enhanced data protection in cultural institutions.