Navigo has been notified by Beacon CRM (Customer Relationship Management), a third-party supplier, that it has experienced a cyber security incident affecting its systems.
Beacon CRM is used by Navigo to support membership, volunteer and community engagement activities. Beacon CRM does not contain clinical records and is not used to store information held within SystmOne or other Navigo clinical systems. There is currently no evidence that clinical records or information relating to an individual's care or treatment have been affected by this incident.
Beacon CRM has advised that an unauthorised third party may have gained access to copies of customer database backups, including information held on behalf of Navigo. Beacon CRM's investigation remains ongoing and external cyber security specialists have been engaged to support their response.
The information held within Beacon CRM varies between individuals but may include:
-
Name
-
Contact details
-
Membership information
-
Volunteer information
-
Other information provided as part of your engagement with Navigo membership.
Navigo’s Information Governance Team has been working closely with Beacon CRM and senior colleagues across the organisation to understand the nature and extent of the incident. The incident has been reported through the appropriate regulatory channels, and a detailed assessment is currently underway.
At this stage:
-
There is no evidence that information relating to Navigo has been published online or otherwise misused.
-
Reviews of the information held within Beacon CRM are ongoing to determine the potential impact on individuals.
Navigo recognises that incidents of this nature can be concerning. We are taking this matter seriously and are working to ensure that any individuals who may require direct communication or additional support are identified as quickly as possible.
Individuals affected will be contacted directly regarding this incident, and where necessary there will be appropriate communication arrangements made. For some individuals this may include support from relevant teams or services.
We will continue to provide updates as further information becomes available.
If you have any questions or concerns, please contact the Information Governance Team via:
Email: navigo.dpo@nhs.net