Warning after cancer charity affected by potential cyber security incident

A local cancer charity is warning its supporters, donors, volunteers and service users to be alert for suspicious emails after a potential cyber security incident.

Macmillan Jersey said shortly after 12.30pm today that it had contacted people whose details may have been held on its customer relationship management (CRM) system after being notified by software provider Beacon CRM that it is investigating unauthorised access to copies of customer database backups.

While the investigation is ongoing, Beacon has advised its customers to assume that information stored within its CRM database “may have been affected”.

The charity stressed that there is currently no evidence that anyone’s personal information has been misused.

It also sought to reassure supporters that payment card details have not been compromised.

Service users’ health and counselling records not impacted

“Donations made to Macmillan Jersey online are processed securely through JustGiving and payment card details are not held within our CRM system,” Senior Operations Lead Kevin Alway explained.

The charity added that counselling notes, medical information, health records and other clinical information are also not held within the affected system.

Instead, the database primarily contains records relating to supporters, donors, volunteers and event participants, along with contact details and communication preferences.

Data watchdog notified

Macmillan Jersey said it had activated its data protection incident procedures as soon as it became aware of the breach and had notified the Jersey Office of the Information Commissioner in line with its legal obligations.

Beacon has since appointed independent cyber security specialists, and the charity said the provider’s systems are now “fully operational and secured” while investigations continue.

‘Stay vigilant’

Although Macmillan Jersey said there is “nothing we need you to do” at this stage, the charity said that, “as a precaution, we recommend remaining vigilant for any unexpected emails or communications claiming to be from Macmillan Jersey, and never provide passwords or financial information in response to unsolicited requests”.

The charity said it would contact affected individuals again if Beacon’s investigation identified any increased risk to their personal information or if further relevant information became available.

Mr Alway apologised for any concern caused, adding: “Protecting the personal information entrusted to us is extremely important, and we are committed to keeping you informed as more information becomes available.”