UK charities' data leaked via Beacon's AWS mistake
A security error at Beacon, a charity management company, accidentally exposed sensitive data from over 1500 UK charities. Attackers accessed private information through a misconfigured AWS account.
- Report priority
- Medium
- Involves
- Beacon
What is known
Beacon's AWS account had a security key left exposed online, letting attackers access private charity data without needing a password.
What to do
Check if your charity used Beacon's software before the issue was fixed, your data may have been exposed.
Contact Beacon directly to confirm if your charity's data was accessed, then monitor for fraud or unauthorized activity in your accounts.
Reported details
An attacker found Beacon's exposed AWS key online. They logged into Beacon's cloud storage without a password and downloaded private charity files, including donor lists and financial records.
CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data
References
- infosecurity-magazine.com · safepal-data-breach-tens-thousands Infosecurity Magazine
- infosecurity-magazine.com · logistics-ceva-data-breach Infosecurity Magazine
- infosecurity-magazine.com · coca-cola-subsidiary-fairlife-data Infosecurity Magazine
- infosecurity-magazine.com · uks-police-national-legal-database Infosecurity Magazine