A cyber security incident has affected several Christian organisations.
It is believed that compromised credentials were used to gain unauthorised access to Beacon Apps Ltd’s systems, and copies of databases held by the organisation were reportedly made.
Langham Partnership UK and Ireland, Keswick Ministries, Christians in Media, Operation Mobilisation UK (OM UK) and Tyndale House Cambridge are just some of the affected organisations that issued statements following the attack.
Beacon CRM – a customer relationship management (CRM) platform created by Beacon Apps Ltd – is used by many charities to manage subscriber and donor contact information.
“Unfortunately, it seems likely that information was downloaded from their system, which may include Keswick Ministries’ supporter information,” Simon Overend – Data Protection Lead at Keswick Ministries – wrote in an email to supporters. “This information could include contact details, information you have shared with us, a record of donations you may have made to Keswick Ministries or events you may have attended here.”
Overend emphasised that Beacon “does not hold information about payment cards or account passwords, so these pieces of information have not been taken.”
On 14 August 2026, a Beacon spokesperson told en: “We recently experienced a cyber-security incident that involved unauthorised access to Beacon systems containing data we process on behalf of our customers. We immediately engaged the support of external cyber-security experts who swiftly contained the incident and launched an investigation.
“Since containing the initial incident, we have not identified or observed any ongoing unauthorised access to Beacon’s systems. Our customers continue to access our platform and services as normal.
“We are taking this incident very seriously. We have notified all of our customers and our focus is now on supporting them as much as possible in any onward communication of their own regarding potential data impact.”
