Statement about Beacon cyber security incident

St Luke’s Hospice has been informed by Beacon CRM, a third-party supplier, of a cyber security incident affecting Beacon’s platform. Beacon has advised that it has evidence of activity during the incident timeline which is symptomatic of data leaving its systems, and that customers should assume, as a precaution, that the data stored in Beacon may have been downloaded.

The system involved is used for fundraising and supporter relationship management. It does not hold clinical records, NHS patient records or payment card information. We are working closely with Beacon, our Data Protection Officer and specialist advisers to understand the position, to assess the potential impact and to take appropriate steps.

Protecting the information entrusted to us is extremely important. We will contact individuals directly as appropriate, and we will continue to update our response as further verified information becomes available.

Media enquiries: Please contact the communications team at communications@stlukes-hospice.org