The Survivor's Trust

Profile narrative

The Survivor's Trust is a UK-based organisation known by the alias "The Survivor's Trust." Its headquarters are located in the United Kingdom. The organisation was among more than 1,500 UK charities affected by a significant data security incident on 27 July 2026, in which a compromised AWS access key enabled an attacker to download all data from a CRM platform operated by Beacon, a third-party service provider. This breach exposed supporters' names, email addresses, telephone numbers and donation records, although no payment card or bank details were stored within the compromised system. The incident lasted approximately one and a half hours, with no evidence of attacker persistence or subsequent data misuse, and the Information Commissioner's Office ultimately cleared the charity of responsibility for the breach. Other charities affected in the same incident included Shrewsbury and Telford Hospital Charity, the British Deaf Association, Yorkshire's Brain Tumour Charity, Sheffield Hospital Charity, Priscilla Bacon Hospice Charity, the Clock Tower Sanctuary and Victim Support.

The scope of the Beacon CRM breach illustrates the shared-vulnerability risk faced by charities that rely on common third-party technology providers, as a single compromised credential was sufficient to expose supporter and donor information across a wide portfolio of charitable organisations. Details regarding The Survivor's Trust's specific operational scope, service offerings, membership base, regulatory positioning or workforce size are not documented in the available source material. Similarly, information concerning its ownership structure, parent entities or subsidiary relationships has not been provided. As a result, the profile above reflects only the confirmed facts available: its UK location, its alias, and its identification as one of the charities impacted by the 2026 Beacon CRM data incident.

Incidents

1 incident linked to this organisation.