We have been made aware of a recent data security incident involving Beacon CRM, the database platform we use to manage supporter contact information. Beacon CRM is used by more than 1,000 charities. It does not hold carers’ data for Carers First.
Beacon is investigating the incident. Our teams are working closely with Beacon to understand what has happened, assess any impact, and take appropriate response measures.
We have contacted the supporters and organisations we understand may be affected. We will keep this page updated as more information becomes available.
What has happened?
Beacon recently identified unauthorised access to its systems, which it believes was caused by compromised login credentials. Beacon has told us that copies of database backups were made and likely downloaded by an unauthorised third party.
What Beacon is doing
Beacon has said it is treating the incident very seriously. It has taken immediate steps to block unauthorised access and is strengthening its systems to help prevent future incidents.
Beacon has told us it is:
running a full forensic investigation with independent cyber-security specialists;
working with law enforcement and relevant regulators;
monitoring the dark web for any sign that data has been shared or sold — so far, nothing has been found; and
resetting passwords and strengthening authentication on affected accounts.
What Carers First is doing
working closely with Beacon while it investigates further;
communicating directly with individuals and organisations affected by the incident;
reported the issue to the ICO and the Charity Commission; and
reviewing our own security practices and access controls.
What supporters can do
Supporters do not need to take any specific action or make any changes as a result of this incident. As a precaution, we ask supporters to remain alert to any unexpected emails, calls or texts. Carers First will never email or text supporters to ask for payment details or passwords.
We understand this news may be concerning, and we are sorry for any worry it may cause. Please be assured that we are taking this incident seriously. Protecting supporter and contact data remains a high priority for Carers First.
If you have any questions, please contact Lisa Hemsley, Director of Income & Engagement, at dataprotection@carersfirst.org.uk.
Online Help and Advice
Visit our online support section where we have provided advice and guidance on a range of relevant topics to help you in your caring role.