Beacon CRM Confirms Full Database Theft After AWS Access Key Breach

Cybersecuritynews •Guru Baran • August 13, 2026

Beacon, the customer relationship management (CRM) platform relied on by over a thousand UK charities and non-profit organizations, has confirmed that a threat actor made a complete copy of and exfiltrated its customer database. The disclosure, released by Chief Technology Officer David Simpson on August 12, 2026, marks a major escalation from initial statements and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Beacon CRM Database Theft Linked to Exposed AWS Key Beacon, a CRM provider for charities, confirmed a breach where a complete copy of its customer database was exfiltrated. The breach is linked to an AWS access key exposed in public JavaScript build artifacts. CTO David Simpson stated that the malicious activity occurred on July 27, 2026, with significant data transfer noted in AWS Cost & Usage reports. The database contained personal information and donation details of affected charities. Although the data was encrypted at rest, the compromised access key allowed the attacker to access it in readable form. Beacon has over 1,500 customers but has not disclosed how many were affected. The company is conducting an investigation and has advised customers to assess their data exposure. This incident marks a significant escalation from initial reports of the breach. 2 sources 69

Extracted Entities

Beacon CRM Confirms Full Database Theft After AWS Access Key Breach

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (2)

Platforms (1)