Dementia Adventure is committed to protecting the personal information entrusted to us by the people we support, our volunteers, supporters and partners.
We store personal information, including names, contact details and, where relevant, medical information, on a database provided by a company called Beacon CRM. On 31 July 2026, Beacon CRM experienced a cyber-security incident which may have resulted in unauthorised access to information held on their systems. Our data, along with data held by approximately 1,500 other charities, may therefore have been affected.
At this stage, we do not know the full extent of any information that may have been accessed. We understand that this may be concerning, particularly for people who have shared personal or sensitive information with us.
We are working closely with Beacon CRM to understand the incident and have taken appropriate steps, including notifying the relevant regulatory bodies.
We have created the frequently asked questions below to provide more information about what has happened, what information may be affected, the actions we have taken, and what you can do to help protect your information.
What has happened?
On Monday 3rd August, we were made aware of a cyber-security incident affecting our database provider, Beacon CRM. As a result of this incident, information held by approximately 1,500 charities, including Dementia Adventure, may have been affected.
Who is Beacon CRM and why does Dementia Adventure use their services?
Beacon CRM provides database systems and services to organisations across the charity sector. Dementia Adventure uses their database system to securely store and manage information relating to the people we support, our supporters, staff and volunteers.
What information may have been accessed?
At this stage, we do not know the full extent of the information that may have been accessed. This could include:
- Names
- Contact details: including addresses, phone numbers and email addresses
- Medical information (where relevant): including, but not limited to, details relating to a dementia diagnosis
- Donation information (where relevant): including, but not limited to, donation amounts, dates and payment methods
- Volunteer information (where relevant): including emergency contact details and DBS reference numbers
- Relationship information: including relationships to other records (for example, spouse, child, friend or employee)
What information does Dementia Adventure hold about me?
The information we hold about you depends on your relationship with Dementia Adventure.
For example, if you have attended one of our supported short breaks, we may hold contact information and relevant medical information to help us provide appropriate support. If you have made a donation to us, we may hold information relating to that donation.
Could my bank details have been accessed?
We do not store bank details or payment card information on this database. If you have made a payment to Dementia Adventure, your financial information is therefore not at risk as a result of this incident.
What have you done about this and how will you reduce the risk of this happening again?
We have reported this incident to the Information Commissioner’s Office (ICO), the UK’s independent regulator responsible for upholding information rights and enforcing data protection law. We have also notified the Charity Commission, the regulator responsible for ensuring charities in England and Wales meet their legal and governance responsibilities.
We have followed the guidance provided by Beacon CRM and are working with them as they conduct a comprehensive investigation into the incident. Beacon CRM has also engaged specialist third-party support to help understand what happened and identify any additional measures needed to strengthen security and reduce the risk of similar incidents occurring in the future.
What should I do if I receive a suspicious phone call or email from Dementia Adventure?
If you receive a phone call claiming to be from Dementia Adventure that you are unsure about, please end the call and contact our office directly on 01245 237548. As an additional precaution, we recommend waiting 5–10 minutes before calling us back.
If you receive an email from us and would like to check whether it is genuine, please forward the email to info@dementiaadventure.org and a member of our team will be able to confirm this.
Do I need to take any action?
At this stage, no specific action is required. However, we encourage you to remain vigilant for unexpected communications and to follow the advice above if you receive anything suspicious.
