The RNLI has warned its members that their personal data may have been stolen in a cyber-attack on a third-party software provider, days after volunteers faced online and physical abuse for rescuing migrants in the English Channel.
Online security experts have cautioned that the identities of RNLI members could have been leaked or fallen into the wrong hands after the attack on Beacon CRM, a software provider used by the charity. In a letter accompanying the autumn issue of its Lifeboat magazine, the RNLI warned supporters that their "name, contact details and records of interactions with the RNLI" could have been breached.
Data breach affects 1,500 charities
The RNLI said it was advised last month by the provider to "assume that data held within its systems was taken" in a cyber-attack that affected around 1,500 charities in late July. The charity added: "At this stage we're not aware of any misuse of your personal information and have no evidence that your information has been published or shared."
The RNLI has suspended its services in Portsmouth since its staff were subjected to relentless abuse and branded "traitors" by anti-migrant protesters. Peter Sparkes, the charity's chief executive, condemned the abuse of its volunteers as "wholly unacceptable in civilised society", adding that the RNLI worked to save lives at sea irrespective of whose they are.
Doxxing concerns raised
The latest data breach has fuelled concerns that lifeboat volunteers could face "doxxing", which involves the publication online of a person's home address. Dr William Allchorn, a senior research fellow at Anglia Ruskin University's International Policing and Public Protection Research Institute, said those on the far-Right could exploit the data breach.
He told the Sunday Telegraph: "They use open source maritime tracking and end-to-end encryption, but beyond that I don't know how sophisticated their set up is." He added: "It is the chill effect. For those on the fringes of the movement this information could be quite key."
Hundreds of protesters blocked roads overnight on September 6 and vowed to stop migrants from leaving the port. The boat, reported to be carrying about 140 migrants, is thought to have made one of the longest journeys of any small boat, and landings as far west as Hampshire are rare.
Security advice issued
The Mirror later revealed that two RNLI heroes were named and pictured online by Portsmouth protestors who condemned them as "collaborators" and "traitors" for rescuing asylum seekers. The RNLI issued security advice warning volunteers and staff not to wear the charity's branding because of "unacceptable abuse".
A spokesman for the RNLI said: "Beacon CRM works with many charities and organisations across the UK and Ireland, and while they cannot confirm exactly which records were accessed or downloaded, it advised all affected organisations, including the RNLI, to assume that data held within its systems was taken. At this stage, there is no evidence that information relating to RNLI supporters has been published, shared online or otherwise misused."
