Reported by 3 outlets

Timeline

1. original reporting

   Beacon CRM Data Breach Exposes Entire Customer Database After AWS Key Compromise

   cyberpress.org · 60d ago · August 14th, 2026

   Beacon CRM, a customer relationship management platform used by more than 1,000 UK charities and non-profit organisations, has confirmed that an attacker copied and exfiltrated its entire customer database following the compromise of an Amazon Web Services (AWS) access key . The updated disclosure, issued by Chief Technology Officer David Simpson on August 12, 2026, significantly expands on Beacon’s earlier statements. A forensic investigation conducted with external cybersecurity specialists determined that the compromised cloud credential enabled unauthorised access to platform data and attachment files stored in the company’s AWS environment. Beacon CRM Data Breach The key had been exposed in publicly accessible JavaScript build artifacts hosted on Beacon’s website. This type of exposure can occur when build processes mistakenly embed environment variables, API keys, or other secrets into front-end code. Once deployed, the files can be retrieved and inspected by anyone, including automated scanners searching for leaked cloud credentials. Such exposures create a direct path to cloud compromise. Threat actors routinely scan public web assets and source repositories for access tokens, keys, and configuration data, then validate discovered credentials against cloud services. Exposed secrets can also be reused in credential-focused phishing operations and traded through criminal marketplaces. Beacon’s official incident report states that investigators examined AWS Cost and Usag

2. update from gbhackers.com

   Beacon CRM Data Breach Exposes Customer Data via Compromised AWS Access Key

   gbhackers.com · 60d ago · August 14th, 2026

   Beacon CRM has confirmed that a threat actor likely downloaded a complete copy of its customer database after gaining access to its Amazon Web Services (AWS) environment using a compromised AWS access key. In an incident update published on August 12, Beacon stated that the database contained all customer data stored on the platform, including […] The post Beacon CRM Data Breach Exposes Customer Data via Compromised AWS Access Key appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

3. mentioned by securityweek.com

   Over 1,000 Charities Hit by Beacon CRM Data Breach

   securityweek.com · 60d ago · August 14th, 2026