Important Security Notice: CRM Service Provider Data Incident
Date: 6 August 2026
To: Our Supporters, Donors, and Community
At New Sight, we take the trust you place in us and the security of your personal information very seriously. We are writing to inform you of a recent data security incident experienced by our third-party donor management platform provider, Beacon CRM.
What Happened
On 4 August 2026, Beacon CRM notified us that they experienced a cyber-security incident involving unauthorised access to their systems on 27 July 2026. Beacon believes that copies of its database backups may have been downloaded, which means that New Sight supporter records stored on the platform may have been exposed.
Scope of the Incident & Affected Regions
- Hong Kong Supporters Only: All supporter data held on our Beacon CRM platform is exclusively based in Hong Kong. Supporters based in other jurisdictions are completely unaffected.
- What Information Was Involved: The records held on the system were strictly limited to contact details (such as names, email addresses, and basic contact information).
- Financial Data Is Fully Safe: No credit card, bank account, or financial information was compromised. New Sight does not store any financial or payment details on Beacon CRM.
What Actions We Have Taken
As the data controller for your information, we took immediate action upon learning of the incident:
- Regulatory Notification: On 5 August 2026, we reported the incident to the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong and are following their guidance.
- Internal Security Steps: All New Sight team members with access to the platform immediately updated their passwords and enforced multi-factor authentication (MFA).
- Continuous Monitoring: We are in ongoing communication with Beacon CRM to monitor their technical containment steps and ensure platform integrity.
Recommended Precautions for Hong Kong Supporters
While no financial details were involved, we recommend staying vigilant against potential cyber threats:
- Beware of Phishing: Be cautious of unexpected emails, messages, or calls asking for personal details or prompting you to click unfamiliar links.
- Verify Authenticity: New Sight will never email or call you asking for bank details, passwords, or sensitive credentials.
Questions & Contact
We deeply regret any concern or inconvenience this vendor incident may cause. Transparency and data integrity remain central to our mission, and we will share updates should further relevant details emerge.
If you have any questions, please reach out to our team at hkdonations@newsightcongo.com or contact Po Cheung at 98305383.
<< Back to News