RNLI Data Breach: Supporters Warned After Cyber Attack 2026

The RNLI data breach has left supporters of the Royal National Lifeboat Institution (RNLI) facing the possibility that their personal information was stolen by hackers. The charity recently warned members that their name, contact details, and records of interactions could have been compromised in a cyber-attack targeting a third-party customer relationship management (CRM) provider.

What Happened in the RNLI Data Breach?

In a letter accompanying the autumn edition of its Lifeboat magazine, the RNLI informed supporters that a company it uses for CRM, Beacon CRM, had advised the charity to “assume that data held within its systems was taken” during a cyber-attack in late July. The breach affected approximately 1,500 charities, according to reports. The RNLI emphasised that there is no evidence to date of misuse, sharing, or publication of members’ personal data.

The timing is particularly sensitive: the RNLI has recently been targeted by far-right agitators who object to the charity’s lifesaving work aiding people attempting to cross the English Channel in small boats. On 6 September, activists tried to blockade a road leading to a landing spot in Portsmouth where RNLI crews helped bring a dinghy carrying 120 asylum seekers to shore.

How the Breach Affects RNLI Supporters

For the RNLI’s loyal supporters, the breach raises concerns about identity theft, phishing attacks, and unwanted contact. The information potentially exposed includes names, contact details, and records of interactions with the charity. While the RNLI has stated that there is no evidence of misuse, supporters should remain vigilant.

Potential Risks of the RNLI Data Breach

• Phishing emails: Cybercriminals may impersonate the RNLI to trick supporters into revealing more information.
• Identity theft: Stolen personal data can be used to open fraudulent accounts or make unauthorised purchases.
• Targeted scams: Donors may be approached with fake charity appeals or fraudulent requests for donations.

RNLI’s Response and Support for Supporters

The RNLI has been proactive in communicating with its supporters about the breach. In its letter, the charity advised members to be cautious of unsolicited communications and to report any suspicious activity. The RNLI is also working with Beacon CRM and relevant authorities to investigate the incident and mitigate any further risks.

Beacon CRM, which provides customer relationship management software to charities, has not yet released a detailed statement about the breach. However, the scale of the attack—affecting around 1,500 charities—suggests a significant vulnerability in the third-party software supply chain.

How Does This Breach Compare to Other Charity Cyber Attacks?

Charity cyber attacks are on the rise, and the RNLI incident is not isolated. The table below compares recent notable charity data breaches.

As this table shows, charities are increasingly targeted by cybercriminals, often through third-party vendors. The RNLI breach highlights the need for robust cybersecurity measures across the nonprofit sector.

What Should RNLI Supporters Do Now?

If you are an RNLI supporter, here are steps you can take to protect yourself:

• Monitor your accounts: Keep an eye on bank statements and credit reports for any unusual activity.
• Be wary of phishing: Do not click on links or attachments in unsolicited emails claiming to be from the RNLI.
• Change passwords: If you use the same password across multiple sites, update it, especially for email and financial accounts.
• Report suspicious activity: Contact the RNLI or Action Fraud if you receive suspicious communications.

FAQ