Beacon CRM Cyberattack May Have Exposed Data at Cultural Organisations

Summary

Beacon CRM says compromised credentials were used to access its systems and database backups were likely downloaded, though exfiltration is unconfirmed. Cultural organisations including English National Ballet and Chiswick House and Gardens Trust may be affected.

Key points

Beacon CRM said it became aware of the potential attack on 29 July and engaged external cybersecurity specialists to investigate and secure its systems.
The company said compromised credentials enabled access and that copies of database backups were likely downloaded, but data exfiltration has not been confirmed.
Potentially affected information at Chiswick House and Gardens Trust includes names, contact details, donation dates and amounts, and correspondence.
The Trust said there is no current evidence that its information was published or misused, or that the incident caused fraud or harm; it reported the incident to regulators.
English National Ballet said some business contact details may have been included while it was transferring data to Beacon. It said passwords and payment information were not exposed.
Beacon said it contained the incident, notified customers and relevant regulators, and has not experienced service interruption.

Article Details

Victim Organization: Beacon CRM
Incident Type: Cybersecurity incident involving temporary unauthorized access to Beacon's systems using compromised credentials. Copies of database backups were likely downloaded, but data exfiltration had not been confirmed.
Data Types Exposed: Names
Contact details
Donation dates and amounts
Correspondence on personal records
Business email addresses
Business phone numbers
Business addresses
Affected Records: Unknown
Affected Data Size: Unknown
Operational Impact: Beacon reported no service interruption, and customers continued to access its platform and services. English National Ballet reported no disruption to its website or online services.
Ransom Or Extortion: None reported
Claim Status: confirmed

MITRE ATT&CK

T1078 · Valid AccountsBeacon said compromised credentials were used to gain access to its systems.

Vendors

Beacon CRMBeacon CRM, which provides customer services management systems, has said it is conducting a “thorough forensic investigation” with specialists after it became aware that compromised credentials were used to gain access.

Products

Beacon CRMBeacon CRM, which provides customer services management systems, has said it is conducting a “thorough forensic investigation” with specialists after it became aware that compromised credentials were used to gain access.

Industries

Arts and cultureA data platform used by numerous organisations in the arts and culture sector has been hit by a cyber attack, placing some of the information stored in it at risk.