HIV Charity Data Breach Exposes Sensitive Health Information of Users
A Manchester-based HIV charity, George House Trust, has alerted users that their sensitive personal and health data may have been stolen in a cyberattack. In an email obtained by the BBC, the organization confirmed that hackers downloaded but did not publicly release information from its systems.
The breach is linked to a larger cybersecurity incident potentially impacting up to 1,500 UK charities. George House Trust, which has supported people living with HIV since 1985, stated it is investigating the attack and taking "all appropriate steps" in response.
The compromised data includes addresses, email accounts, phone numbers, and detailed notes on users’ interactions with the charity. While there is currently no evidence of misuse, the full extent of the breach including the number of affected individuals remains unclear. The charity has not disclosed further details on the attack’s origin or methodology.
Source: https://www.bbc.co.uk/news/articles/ckgxn77l3pjo
George House Trust TPRM report: https://www.rankiteo.com/company/george-house-trust
"id": "geo1787763635",
"linkid": "george-house-trust",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare/Non-Profit',
'location': 'Manchester, UK',
'name': 'George House Trust',
'type': 'Charity'}],
'customer_advisories': 'Email notification sent to users',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Addresses, email '
'accounts, phone '
'numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal data', 'Health data']},
'description': 'A Manchester-based HIV charity, George House Trust, has '
'alerted users that their sensitive personal and health data '
'may have been stolen in a cyberattack. The breach is linked '
'to a larger cybersecurity incident potentially impacting up '
'to 1,500 UK charities. The compromised data includes '
'addresses, email accounts, phone numbers, and detailed notes '
'on users’ interactions with the charity. There is currently '
'no evidence of misuse.',
'impact': {'data_compromised': 'Addresses, email accounts, phone numbers, and '
'detailed notes on users’ interactions with '
'the charity',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'references': [{'source': 'BBC'}],
'regulatory_compliance': {'regulations_violated': ['GDPR']},
'response': {'communication_strategy': 'Email notification to users'},
'title': 'HIV Charity Data Breach Exposes Sensitive Health Information of '
'Users',
'type': 'Data Breach'}