Statement of Information for Our Supporters

Beacon CRM Data Breach 

August 2026

We have been informed of a cyber security incident involving a ‘Customer Relationship Management’ (CRM) system called ‘Beacon’ used by Beechwood Cancer Care.

Beacon have informed us that they have experienced unauthorised access to their systems.

Beacon’s CRM system is used by around 1,500 UK charities to manage contact information about supporters, volunteers and fundraising activities. 

While Beacon continues to investigate the incident, we wanted to make our supporters aware of this matter.

The information held in our Beacon system may include your name and contact details, your history of support for our organisation, and other information you have provided to us. We do not store supporter card payment or bank details in Beacon.

Please also note that the database does not contain records relating to the therapeutic services (e.g., counselling) that Beechwood provides to clients who have been referred to the charity for support relating to cancer. 

As soon as we became aware of the incident, we began assessing the potential impact with support from Beacon and are following the guidance provided by the relevant authorities. Beacon has engaged specialist cybersecurity experts, implemented additional security measures, and continues to investigate the incident.

We are not aware of any misuse of your information; however, we recommend remaining alert to unexpected emails, phone calls or messages claiming to be from Beechwood Cancer Care or other trusted organisations that ask you to provide sensitive personal information or passwords. If you receive any communication that seems unusual, please contact us directly using our normal contact details before responding.

Do You Need to Take Action?

At this stage, we have not been advised that you need to take any specific action. However, as stated above, we recommend remaining vigilant for any unexpected contact claiming to be from Beechwood (or Beechwood Cancer Care).  Please note that we will never ask you to provide sensitive personal information by email, telephone or text message.

What are we doing?

We are sorry to be notifying you about this. Please be assured that we are working closely with Beacon, alongside the many other UK charities affected by this incident, to understand how it occurred. Beacon was selected because it met the high security standards and certifications we expect from a supplier entrusted with supporter information.

We will continue to work closely with Beacon throughout their investigation and will do everything we can to ensure your personal information remains at the centre of every decision we make.

Beacon has notified the Information Commissioner’s Office (ICO) of the breach, and Beechwood Cancer Care has also notified the ICO independently.

If you have any questions, please contact enquiries@beechwoodcancercare.co.uk

Beacon are posting updates on their webpage: https://www.beaconcrm.org/incident