Charity Commission

Beacon cannot tell what the attacker took, so 1,000-plus charities must assume everything

The CRM provider says its logs cannot identify which objects were accessed, and volume comparison suggests the whole database left. One AWS key became a sector-wide notification problem.