An HIV charity has warned users that sensitive health information may have been stolen in a data breach linked to a wider cyber security incident.
George House Trust told users that hackers had downloaded material held on a database, but that it had not been published.
The Manchester-based charity said the affected database contained personal information including addresses, email addresses, telephone numbers and “notes and records” about users’ engagement with the organisation.
It is unclear how many people connected to George House Trust have been affected.
The breach is part of a wider cyber security incident potentially affecting up to 1,500 charities across the UK.
George House Trust, which was established in 1985 and provides support, advice and information to thousands of people living with HIV, said it was investigating and “taking all appropriate steps”.
The charity told users there was “no sign that any of the data or information” had been “misused in any way at this time”.
The incident involves technology company Beacon, which operates a database system used by more than 1,000 charities across the country.
Beacon said the breach occurred at the end of July and that it “immediately engaged external cyber security experts to help contain the incident and investigate”.
The company said it was supporting all affected organisations.
George House Trust said Beacon informed it of the breach on 3 August. Affected users were notified about three weeks later.
The charity said it had waited until it had a “fuller understanding” of what had happened before notifying people.
It said it had reviewed the information held by Beacon and, where sensitive data was identified, had “sought to inform the relevant individuals”.
