CrossReach Data Breach
The following communication was sent out by CrossReach on 5th August 2026. If you have been a supporter of CrossReach please take a moment to make yourself familiar with the content
I am writing to inform you of a data security incident involving Beacon, the fundraising database we use to manage supporter contact information.
Your contact details are held in our CRM database, provided by a company called Beacon. On Monday 3rd August, Beacon informed us that they had experienced a cyber-security incident. Beacon believes that compromised credentials were used to access their systems, and that copies of their database backups were made.
At this stage we don’t know exactly what information may have been affected. Beacon has engaged external cyber-security experts to investigate, and we are following their guidance closely.
The data we hold on Beacon includes the names and contact details of current and previous supporters of CrossReach, and the history of your support and interactions with us, it is this data which may have been compromised.
We do not hold any financial information such as bank account or card details, so these are unaffected.
What we are doing
We are following Beacon’s incident guidance and are working to understand the full extent of the incident and have put measures in place to protect our systems. We have also begun the process of reporting this event to the Information Commissioner’s Office (ICO), as required.
What you can do
We recommend that you remain vigilant for any unusual or unexpected contact that appears to come from CrossReach, Beacon, or related organisations. If you receive any suspicious emails, calls, or messages asking for personal or financial information, do not respond and please report them to us.
If you would like to read further, Beacon have produced a FAQ.
We can appreciate this is concerning and we’re incredibly sorry that this has happened. We know that thousands of other charities and organisations who use Beacon’s software have also been affected. We are working alongside them to understand the full picture as quickly as possible.
We want to reassure you we take the security of your personal data seriously. We will provide further updates if new information becomes available. This is not a marketing email. If you have unsubscribed from our marketing list, you are still unsubscribed and will not receive any further emails
Thank you for your understanding.
Yours sincerely
Craig Wills
Head of Fundraising at CrossReach