Bristol Mind affected by Beacon CRM Data Breach (updated 14.08.2026)

 

On Monday 3 August, Bristol Mind was informed about a data security incident involving Beacon, a third-party system that we use to hold volunteer, service user, donor and client data. This may have affected personal information you have shared with us in your contact with Bristol Mind. You may also hear from other organisations, because the systems affected are in common use across many different charities.

What Happened:

Beacon, a customer relationship management (CRM) system used by some local Minds in England and Wales, has recently experienced a cyber security incident involving unauthorised third-party access to its systems. 

Beacon is leading the investigation into this incident with the support of external cyber-security specialists. Following an update on 12 August 2026, Beacon have confirmed a copy of the database which holds all Beacon customer data, including attachment files, was made and likely downloaded in a readable format by the unauthorised third-party.

PLEASE BE ASSURED that no bank or card details have been part of this breach and there is no evidence that any payment details from payment processors have been compromised.    

What we are doing:

As a precaution, Beacon is prompting password resets on the system we use, which we have completed as a matter of urgency. We have also reported the incident to the Information Commissioners Office and the Charities Commission.

We understand this news may be concerning for people who use our local Mind services. We are taking this matter very seriously. We encourage you to be vigilant and refer to the advice below.

What this means for you:

We understand that receiving this news may feel confusing and upsetting. We would encourage you to: 

  • Be mindful of unexpected emails or telephone calls referring to local Mind donations or Gift Aid. 
  • Refrain from providing passwords, bank details or security codes in response to an unexpected request. 
  • Check an e-mail sender’s address carefully before responding or opening a link. 
  • Monitor your accounts. Report any suspected fraud to your bank immediately.  

Next Steps:

We will provide further updates on the News section of the Bristol Mind website as Beacon’s investigation progresses and if information becomes available. So far Beacon has said there is currently no evidence that this data has been shared publicly.

For further information about this incident please visit the Beacon website.  

If you are worried about how this incident may affect you, please contact us, Bristol Mind via email [email protected]. We are here to support you and will do our best to answer any questions we can while Beacon’s investigation continues.

Loading

Posted on: 14th August 2026

back to news