Beacon CRM
Filed here are the firms whose record of you did not begin with a sign-up. What holds the file together is the device rather than an account, so there may be nothing to log into and no delete button. The right to ask does not depend on having an account.
Reported incidents
Every charity's donor database assumed downloaded after a leaked cloud key
2026-08-05Affected Beacon CRM database backups
Beacon, a CRM used by UK charities for donations, memberships and case work, told customers on 3 August 2026 that copies of its database backups were likely downloaded. It said an AWS access key exposed in public JavaScript files let someone in on 27 and 28 July, and that its assessment is "the threat actor exported all data." Charities named as affected include the Molly Rose Foundation, Macmillan Cancer Support Jersey and English National Ballet. The data includes donors' and contacts' names, addresses, emails, phone numbers, dates of birth and donation records. Card and bank details were not held.
People affected typically ask Beacon CRM to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.