Beacon CRM Database Breach: Full Theft Confirmed

**Beacon CRM Database Breach:** Beacon confirmed that an exposed AWS credential in public JavaScript build artifacts was used on July 27, 2026 to access and exfiltrate its entire customer database and attachment files (attack window ~1 hour 27 minutes), potentially affecting over 1,000 UK charities; Beacon rotated credentials, removed exposed secrets, deployed enhanced cloud monitoring, and regulators have been notified, with no public evidence so far that the stolen data has been published or sold.