Statement: Age UK London affected by Beacon cyber-security incident

On 3rd August 2026, Age UK London was informed about a data breach affecting Beacon, the third-party database system that we use to manage our supporter’s information.

During the breach an unauthorised download of information held on Beacon took place. We believe this includes information we use to contact our supporters including names and email addresses, and sometimes information about the London borough someone lives in. For some people the data includes information about campaign areas of interest (for example, ‘housing’ or ‘transport’) where this has been shared with us. No financial information such as bank card or bank account information is stored on this database.

We would like to apologise to our supporters that this has happened, and we understand that many supporters will be concerned.

We have written to our supporters to inform them. As there is potential that the incident increases the risk of receiving ‘phishing emails’, we are asking our supporters to be vigilant about emails that they receive, especially if they receive emails where they cannot be sure who the sender is. We shared guidance from the National Cyber Security Centre when we informed our supporters.

Other immediate steps taken upon learning of the incident have included making a report to the Information Commissioner’s Office; informing the Charity Commission; and working with the database provider who have engaged cyber-security experts to investigate and secure the systems.

We would like to apologise to everyone affected by this. We regret this situation and the worry that this will have caused.

When there is an update that we can share with supporters we will do this. If you have any questions, please email campaigns@ageuklondon.org.uk.