Data breach hits hospital charity supporters
A Shropshire hospital charity has said that sensitive details relating to donors, supporters and community members was included in a major data breach.
The Shrewsbury and Telford Hospital Charity was affected on 3 August by the national breach of third-party system Beacon CRM, which is used by hundreds of other organisations.
The charity emailed supporters on 6 August and said the data involved may include names, addresses, email addresses, phone numbers and details of membership and donations.
It added the breach did not involve bank or debit/credit card details, and it was not aware of any misuse of its information.
“The incident does not affect any other systems of The Shrewsbury and Telford Hospital NHS Trust (SaTH),” said Anna Milanec, group chief governance officer at the trust.
Beacon provides the charity with an online system for the hospitals’ charity and community engagement teams.
“Beacon has engaged specialist cyber security experts to investigate the incident,” Milanec said.
The charity urged supporters to remain vigilant for any suspicious emails, telephone calls, text messages or correspondence claiming to be from its organisation or a trusted third party.
“We appreciate that this news may be concerning and we sincerely apologise for any worry or inconvenience this incident may cause,” the charity added.
“If the investigation identifies any further information that may affect you, we will provide an update as soon as possible.”
The Charity Commission said it was aware of the breach and actively monitoring the situation, and was in contact with the Information Commissioner’s Office (ICO).
Follow BBC Shropshire onBBC Sounds,Facebook,XandInstagram.
Hospital charity supporters hit by cyber attack
Shrewsbury and Telford Hospital Charity
NHS
Shrewsbury
Telford
Data breaches
