Statement: Cyber Security Incident Affecting Supporter Data

Calderdale & Huddersfield NHS Charity has been informed of a cyber security incident involving Beacon CRM, a third-party supplier used by many charities across the UK to manage supporter and donor information. On 3 August 2026, Beacon notified its customers that it had experienced unauthorised access to its systems and that data held within its platform may have been accessed by an unauthorised party.

At this stage, there is no evidence that personal information has been misused. However, as a precaution and in the interests of transparency, we are informing supporters whose information may have been affected. The data held within Beacon may include names, postal addresses, email addresses, telephone numbers, donation and fundraising history, communication records and emergency contact details.

Importantly, Beacon does not store payment card details or bank account information on behalf of Calderdale and Huddersfield NHS Charity, and there is currently no indication that any financial information has been compromised.

We are working closely with Beacon as its investigation continues and the incident has been reported to the Information Commissioner's Office (ICO). Beacon has implemented additional security measures and engaged specialist cyber security experts to support its response.

As a precaution, we encourage supporters to remain vigilant for unexpected emails, messages or phone calls and to avoid sharing personal information in response to unsolicited communications.

We sincerely apologise for any concern this incident may cause. Protecting the personal information entrusted to us is extremely important, and we remain committed to keeping supporters informed as further information becomes available.