Users of the Manchester-based HIV charity, George House Trust, have been informed that their sensitive and personal health information may have been stolen in a data breach. The charity stated in an email to users that hackers downloaded the material, but it has not been published.
The incident is part of a wider cybersecurity breach that could affect up to 1,500 charities across the UK. The George House Trust, established in 1985, provides support and information to people living with HIV.
Personal information potentially compromised includes addresses, emails, telephone numbers, and notes regarding user engagement with the charity. However, the charity stated there is currently "no sign that any of the data or information" has been "misused in any way at this time."
The security incident involves technology company Beacon, which operates a database system for over a thousand charities. Beacon reported the data breach occurred at the end of July and engaged external cybersecurity experts to investigate. George House Trust was informed by Beacon on 3 August and subsequently informed affected users after a review.