DTA Wales Data Security Update: Beacon CRM Incident

August 25, 2026

Along with many other organisations, DTA Wales has been affected by the data breach that occurred on Wednesday 28th July at Beacon CRM, our CRM (customer management system) software provider. 

What Happened? 

On Wednesday 29th July 2026, Beacon, our CRM software provider, became aware that they may have experienced a cyber-security incident. They immediately engaged external cyber-security experts to help investigate and secure their systems. We were notified by Beacon about this on Monday 3rd August. 

What data has been affected? 

Beacon has not yet been able to confirm to us what data has been compromised, so on their advice we are working on the cautious basis that all our records may have been accessed. Personal data we hold consists of: 

  • Names, e-mail addresses 
  • Where provided, address and phone numbers 
  • A small number of supplier invoices that could contain personal names, addresses and bank details 

Importantly, no card details have been compromised, and the payments that we take for membership through our Stripe integration are unaffected. 

What have Beacon done? 

Beacon implemented immediate measures, including: 

  • Conducting a thorough forensic investigation with their external cyber-security specialists to understand exactly what’s happened; 
  • Working with law enforcement and relevant regulators as required; 
  • Conducting continued online monitoring of the dark web, as is standard practice in these kinds of incidents. So far, they haven’t seen any reference or data linked to this incident. 

What is the risk? 

The main risks to our network from this breach are: 

  • Spam, phishing or scam e-mails/calls/texts that impersonate DTA Wales or another legitimate organisation 
  • Unsolicited communication 
  • Misuse of personal information 

Please be extra vigilant when receiving any calls, e-mails or texts. We will never contact you to ask for additional payments, and our bank details have not changed. If you have any concerns at all following receiving an e-mail or other form of communication, you can contact us on info@dtawales.org.uk and we will confirm whether it is legitimate. 

For further information, please see the Beacon statement.