Hereford Cathedral has alerted the public after a cyberattack on July 29 led to a data breach involving donor details. The breach affected Beacon, the provider of donor management software the cathedral uses. Officials were informed of the security issue on August 3, prompting urgent action. A letter was sent to potentially affected supporters explaining the situation and outlining next steps.
What Information Was Compromised?
Data that might have been accessed includes personal details such as names, addresses, email addresses, and phone numbers. It also includes donation records, membership data, and information about past interactions with the cathedral. Fortunately, supporters have been told that financial information like bank details, debit card data, and direct debit information is stored separately and has not been impacted. This distinction has been emphasized as a key point of reassurance for affected individuals.
Beacon is working with external cybersecurity experts to determine the full scope of the breach and to strengthen system security. At the same time, cathedral staff and IT professionals are reviewing internal protocols and updating access credentials linked to Beacon. The incident has also been reported to key regulatory bodies, including the Information Commissioner's Office and the Charity Commission. These measures are intended to ensure both transparency and improved protection for the future.
Cathedral officials sent a letter to those potentially affected, urging them to be alert. The message warns of phishing attacks, scam emails, and suspicious phone calls that may mimic communications from the cathedral or the Hereford Cathedral Perpetual Trust. These fraudsters might use the stolen data to create convincing messages or make unauthorized requests for account changes and transfers. Donors have been advised to remain cautious and to verify the authenticity of any requests for sensitive information or financial details.
The Very Reverend Sarah Brown, Dean of Hereford and chair of the cathedral chapter, and Philip Dunne, chairman of the trust, have apologized for the breach. They expressed deep regret over the distress it may have caused and reassured donors that efforts are continuing to manage and resolve the issue. Officials added that ongoing donation programs and the Spektrix ticketing system have not been disturbed by the breach, and events will continue as scheduled. This has been reiterated to ensure supporters can continue their engagement with the cathedral without disruption.