Beacon incident
On 3 August 2026 we were notified about a cyber security incident involving the Beacon database. Beacon is the system we, and 1,500 other charities, use to manage information about the people who contact and support our charity.
At this stage, we do not know the extent of the incident, or its impact on our systems. We have been told by Beacon that an unauthorised third party gained access to their systems. Beacon has told us that it has contained the incident and is continuing its investigation into the extent of the breach.
We have not to date received evidence or confirmation from Beacon that our data has been downloaded, copied, decrypted or read.
We are sorry that this has happened. We appreciate that news like this may be concerning to the people who contact and support our charity. Protecting your personal information is extremely important to us, and we take these matters very seriously.
Do I need to take action?
We are not currently aware of any misuse of Care Rights UK data. However, as a precaution, we recommend that our supporters and contacts:
Remain vigilant to any unexpected emails, calls, or texts claiming to be from us or from others.
Take a moment to verify anything that seems unusual before responding, opening attachments, clicking links, or sharing personal details.
Do not divulge passwords, authentication codes or any financial information in response to unsolicited requests which you are not absolutely certain are genuine.
Contact us if you receive a communication claiming to be from Care Rights UK which you’re unsure about.
What are Care Rights UK doing?
As soon as we were notified about this incident, we responded to do what we can to secure our own systems. We are working closely with Beacon, alongside other charities affected by this incident, to understand the extent of the breach and how it occurred. We selected Beacon as our database provider because it met the high security standards and certifications we expect from a supplier entrusted with your information. We are continuing to press Beacon for information and will keep the position under review as its investigation develops. We will continue to work closely with Beacon throughout their investigation. We have also notified the regulator, the Information Commissioner’s Office (ICO). The ICO has confirmed that it has closed the case and does not require any further action from us at this stage.
Further information
We understand you may have questions. At this stage, we have limited information while the investigation continues, but we will provide further updates on any developments on this page. If you have any immediate concerns, please contact us on team@carerightsuk.org
Please see Action Fraud’s resources for advice on how to remain vigilant about your cyber security: www.actionfraud.police.uk/individual-protection
Page last updated: 10 August 2026