We have been informed that a data breach has affected Beacon, the third-party database that stores JFC’s membership and affiliate information. This has affected all the 1000+ organisations that use Beacon and is not limited to JFC’s data.
The Beacon database does not store card details or bank account information.
What happened?
On 3 August 2026, Beacon notified us that they had experienced a cyber-security incident in which an unauthorised third party gained access to its systems. Beacon contained the attack, but it appears that copies of database backups were made.
What data is affected?
The affected data includes information about our affiliates and individual supporters, including:
- Name
- Address
- Contact details (email and phone number)
- Affiliated branch/region name
- Affiliation point of contact details
- Records of affiliation fees and/or donations
What should you do?
Beacon has informed us that they are not aware of any misuse of affiliate or supporter data. However, we ask that you please look out for suspicious correspondence, phone calls or texts claiming to be from Justice for Colombia.
We will never ask for your payment details, including passwords or credentials, out of the blue.
What have JFC done?
JFC has reported the data breach to the Information Commissioner’s Office (ICO). We will be contacting affiliates and supporters individually to notify you of the data breach.
We apologise for the concern caused by this security incident. If you have any queries regarding the data breach, please contact: info@justiceforcolombia.org
