Skip to content
Charities Urged to Enhance Cyber Security After CRM Platform Breach

Charities Urged to Enhance Cyber Security After CRM Platform Breach

First seen 12 Oct 2026, 05:58 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 06:30 UTC
  • •Over 1,000 charities were affected by a CRM platform breach.
  • •Attackers exploited a compromised AWS access key to access encrypted data.
  • •Charities are urged to prioritize cyber security governance and access management.

Charities are being advised to strengthen their cyber security measures following a breach of a customer relationship management (CRM) platform that serves over 1,000 charities. Siobhan Holmes from Azets highlighted that the attack exploited a compromised AWS access key, allowing hackers to access encrypted data in a readable format. The breach emphasizes the vulnerabilities charities face due to reliance on shared technology providers. Holmes stated that encryption alone is insufficient and called for improved identity and access management. She urged charity boards to prioritize cyber security in governance discussions. The incident serves as a reminder that even organizations like charities can be targeted, similar to major corporations. The exact number of affected organizations and the full scope of the breach remain unclear.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

Recent
Breach of CRM platform disclosed
A CRM platform used by over 1,000 charities was breached, compromising donor data.
Bournemouthecho

More articles in this cluster (2)

Following this threat?

Track AWS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 4

Common questions

What specific vulnerabilities were exploited?
The breach was enabled by a compromised AWS access key, allowing unauthorized access to encrypted data.
How should charities respond to this breach?
Charities should enhance their cyber security measures, focusing on identity and access management, and make it a regular agenda item in board meetings.
Is this breach part of a larger trend?
Yes, it reflects a growing concern for cyber security vulnerabilities within the charity sector, which relies heavily on shared technology.