An update regarding the database system we use

Earlier this week, we were informed that Beacon CRM, the database we use to manage our supporters, donors and adoption enquiries, had experienced a cyber security incident.

While Beacon's investigation is still ongoing, we didn't want to wait before letting you know. We believe you have a right to be informed as soon as possible.

What happened?

On 3 August 2026, Hay Animal Rescue Team was informed by Beacon CRM that it had experienced a cyber security incident involving unauthorised access to its systems. Beacon CRM has advised charities using its platform to assume that information held before 28 July 2026 could have been affected while its investigation continues. Beacon CRM has around 1,500 charities using its platform, which may have been affected by this incident.

Earlier this year, we moved to Beacon CRM to help us manage supporter information, donations, Gift Aid declarations, adoption enquiries and communications. We chose Beacon because it is a specialist CRM designed specifically for charities and because it provided information about its security and data protection measures.

What information do we hold about you?

Depending on your relationship with us, this may include your name, email address, postal address, telephone number (where provided), date of birth (where provided), Gift Aid declaration, donation history, and information provided as part of an animal adoption enquiry or application (where applicable).

Importantly, no payment card details, bank account information or passwords are stored within Beacon, so if you have made a donation to us, your payment information has not been affected.

What have we done?

As soon as we were informed, we followed Beacon's security guidance, reviewed our use of Beacon and related systems, and reported the incident to both the Information Commissioner's Office (ICO) and the Charity Commission. We will continue to work closely with Beacon as their investigation progresses.

Is there anything you should do?

At this time, there is no evidence that your personal information has been misused. However, we recommend remaining vigilant for unexpected emails, telephone calls or text messages and being cautious before clicking links or sharing personal information. Please never share passwords, security codes or banking information in response to an unsolicited request.

A personal message

I am truly sorry that I have to send this email.

You place your trust in us not only to care for animals, but also to look after your personal information. We take that responsibility seriously, which is why we wanted to tell you about this incident as soon as we became aware of it.

Although this incident occurred within Beacon's systems rather than our own, I know you trusted us with your personal information. I am genuinely sorry that this has happened and for any worry or concern it may cause.

As a small, volunteer-run charity, your trust means everything to us. We are committed to being open and transparent, and we will continue to keep you informed as Beacon's investigation progresses. If we receive any new information that affects you, we will let you know without delay.

If you have any questions or concerns, please don't hesitate to contact us by responding to this email.

Thank you, as always, for your kindness, your understanding, and for helping us continue to rescue animals in need.

With sincere thanks,

Becky 
Founder

Frequently Asked Questions: Beacon CRM cyber security incident

What happened?

On 3 August 2026, Hay Animal Rescue Team was informed by Beacon CRM that it had experienced a cyber security incident involving unauthorised access to its systems.

Beacon CRM is the database system we use to manage supporter information, donations, Gift Aid declarations, adoption enquiries and communications.

Beacon has advised charities using its platform to assume that information held before 28 July 2026 could have been affected while its investigation continues.

Around 1,500 charities using Beacon's platform may have been affected by this incident.

Was Hay Animal Rescue Team hacked?

No. The incident occurred within Beacon CRM's systems rather than within Hay Animal Rescue Team's own systems.

Beacon is a specialist charity CRM provider that we selected to help us manage information safely and appropriately.

Why did Hay Animal Rescue Team use Beacon?

We moved to Beacon CRM earlier this year because it is a specialist system designed specifically for charities. At the time of choosing Beacon, it provided information about its security and data protection measures, and we trusted it as a suitable system to manage supporter and adoption information.

What information may have been affected?

Depending on your relationship with us, information stored within Beacon may include:

• Name

• Email address

• Postal address (where provided)

• Telephone number (where provided)

• Date of birth (where provided)

• Gift Aid declaration information

• Donation history

• Animal adoption enquiry or application information (where applicable)

Are my bank details or payment information affected?

No.

Hay Animal Rescue Team does not store payment card details, bank account information or passwords within Beacon.

If you have donated to us, your payment information has not been affected by this incident.

Has my information definitely been accessed?

At this stage, Beacon's investigation is ongoing. We do not yet have confirmation of exactly what information may have been accessed.

Beacon has advised charities using its platform to take a precautionary approach while investigations continue.

Has my information been misused?

At this time, we are not aware of any evidence that personal information held by Hay Animal Rescue Team has been misused.

We recommend remaining cautious and reporting anything suspicious.

What should I do?

You do not need to take any specific action at this time.

However, please remain vigilant for:

• Unexpected emails

• Suspicious text messages

• Unexpected phone calls

• Requests for passwords, security codes or financial information

Never share sensitive information in response to an unexpected request.

Will I receive another update?

If Beacon's investigation provides new information that affects our supporters or adopters, we will share further updates.

Has this been reported?

Yes.

We have reported the incident to the Information Commissioner's Office (ICO) and the Charity Commission.

Why did you tell us if the investigation is still ongoing?

We believe honesty and transparency are important.

Although we do not yet have all the answers, we wanted to inform supporters and adopters as soon as possible rather than wait until the investigation is complete.

Who can I contact if I have concerns?

If you have any questions or concerns, please contact Hay Animal Rescue Team through your usual contact method or respond to the email notification you received.

We are here to help.