Essential Guidance for Charities Impacted by the Beacon Cyber Security Incident

The Charity Commission is currently addressing a recent cyber security breach related to Beacon CRM and is mindful of the potential ramifications for the charities utilising its services.

We understand the distress this incident may have caused to the affected charities and their supporters. In light of the nature of the breach and the number of charities potentially impacted, the Commission is diligently monitoring developments and maintaining communication with the Information Commissioner’s Office (ICO), the principal authority responsible for enforcing information rights and data protection legislation in the UK.

Encouraging Responsible Reporting

Several charities impacted by this incident have already submitted serious incident reports to the Commission. We strongly urge trustees to adhere to our guidance on serious incident reporting, which necessitates the disclosure of any events that may result in, or pose a risk of, significant harm, loss, or damage to the charity, its beneficiaries, assets, services, or reputation.

Given the anticipated volume of reports related to this issue, alongside other incoming cases, it is expected that the Commission’s response time may be longer than usual. We appreciate your patience and understanding as we prioritise those instances that present the greatest risk.

Guidance for Charities on Cyber Security

In the interim, trustees are encouraged to refer to the Commission’s guidance regarding how charities should manage cyber crime, as well as the ICO’s advice for organisations. It is crucial that trustees remain aware of their obligation to report to other regulators, particularly the ICO, in addition to informing individuals whose data is held on Beacon systems on behalf of their charity.

We recognise that many customers of Beacon have acted swiftly to notify their supporters about this incident. Transparent communication with your charity’s stakeholders is essential for maintaining trust and safeguarding the relationships that are vital to your mission.

Supporting Charities Through the Process

We acknowledge the extra resources that charities will need to allocate in order to address this situation effectively. The Commission is committed to ensuring that its regulatory engagement with affected charities is proportionate, while also ensuring that trustees are fulfilling their responsibilities.

The Commission will continue to keep a close watch on this evolving situation, and any significant updates will be communicated on this page.