Theregister Beacon CRM Database Theft Linked to Exposed AWS Key
Article Content
- •Beacon confirmed a complete database theft linked to an exposed AWS access key.
- •The breach occurred on July 27, 2026, with significant data transfer noted.
- •Affected data includes personal information and donation details of charities.
Beacon, a CRM provider for charities, confirmed a breach where a complete copy of its customer database was exfiltrated. The breach is linked to an AWS access key exposed in public JavaScript build artifacts. CTO David Simpson stated that the malicious activity occurred on July 27, 2026, with significant data transfer noted in AWS Cost & Usage reports. The database contained personal information and donation details of affected charities. Although the data was encrypted at rest, the compromised access key allowed the attacker to access it in readable form. Beacon has over 1,500 customers but has not disclosed how many were affected. The company is conducting an investigation and has advised customers to assess their data exposure. This incident marks a significant escalation from initial reports of the breach.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Beacon in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…