13 August 2026
This is a follow-up to our initial notice published on 4 August 2026 regarding the external database platform, Beacon, used by Oak Hill College.
Key Findings from the Investigation
Following our previous update, Beacon’s external cybersecurity specialists have progressed their forensic investigation. We are sharing the latest findings directly with our community to ensure complete transparency.
Database Download Confirmed: The investigation has established that an unauthorised third party gained access to Beacon’s system on 27 July 2026 via a compromised system access key.
Scope of Data: It is now assessed that the third party exported a complete copy of the database backup, including attached files stored on the platform at that time.
No Known Misuse: Threat intelligence and online monitoring have found no evidence that any data associated with this incident has been published, disclosed, or misused.
What Information Is Involved (and What Is Safe)
Potentially Impacted Data: Contact details (names, addresses, emails, phone numbers), event and short course attendance records, admissions enquiries, and attached documents sent with those enquiries.
Completely Safe: Payment card details, bank account credentials, and passwords are not stored on Beacon. These remain completely secure and uncompromised.
Actions Taken & Current Security
Remediation & Monitoring: The vulnerability was immediately closed, and all system credentials were reset. Advanced 24/7 endpoint detection and security monitoring tools have been deployed across Beacon's systems to prevent any further unauthorised access.
No Ongoing Threat: Forensics have confirmed there is no persistent or ongoing unauthorised access to the platform.
Regulatory Reporting: Oak Hill College has updated the Information Commissioner’s Office (ICO) with these technical findings and continues to follow all official guidance.
What You Should Do
Because passwords and financial information were not involved, you do not need to take direct action regarding your credentials or accounts.
However, as a matter of good standard practice, please remain vigilant against potential phishing attempts:
Be Cautious: Watch out for unexpected emails, phone calls, or text messages claiming to be from Oak Hill College.
Remember Our Policy: Oak Hill College will never call or email you asking for payment details, bank credentials, or passwords.
Verify Requests: If you receive a suspicious message, do not click on any links. Verify it directly with us using the official contact details on our website.
Next Steps & Our Commitment
We expect a final summary report from Beacon once their investigation fully concludes in the coming weeks, and we will update this page if any material new information emerges.
We take our responsibility to protect your personal data extremely seriously and sincerely regret any concern this vendor incident may cause.
If you have any further questions or concerns, please contact us via our website contact form.
4 August 2026
This note was sent to all who are on our database. Further updates will be written here in due course.
I am writing to provide an update regarding a cybersecurity incident involving Beacon, the external database platform used by Oak Hill College to manage our admissions enquiries, communications and bookings for events and short courses.
What Happened
Beacon has let us know that, after an ongoing forensic investigation with external cybersecurity specialists, an unauthorised third party accessed their systems and downloaded copies of database backups.
What Information Was Affected
Out of an abundance of caution, we are assuming that data stored in our Beacon platform may have been accessed. This includes contact details (name, address, email, phone number), event and course attendance records and admissions enquiries.
Because Beacon does not store payment card details, bank account credentials, or passwords, these were not compromised. We have no evidence that any accessed information has been misused.
What Is Being Done
Incident Contained: Beacon’s external security experts have resolved the vulnerability, reset all system credentials, and deployed 24/7 monitoring. They have confirmed there is no ongoing unauthorised access.
Regulatory Compliance: Oak Hill College has reported this incident to the Information Commissioner’s Office (ICO) and is following all official guidance.
We are confident that our Beacon account is secure, and we will continue to use our system in the ordinary way.
What You Can Do
You do not need to take any direct action, we simply wanted to let you know what has happened.
Please though remain vigilant against potential phishing attempts:
Be cautious of unexpected emails, calls, or text messages claiming to be from Oak Hill College.
Remember that we will never call you asking for payment, bank details, or passwords.
Verify any suspicious requests directly through the contact details listed on our official website.
Our response
We are very sorry for the inconvenience and concern that this news will inevitably cause.
Please be assured that we are taking this very seriously and are working hard to understand what has happened, and to take our next steps carefully.
Further Information
If you have questions which have not been answered here, you can get in touch with us through our website here, where any additional updates will be shared.