Important information about a data security incident
Important information about a data security incident
We want to make you aware that Rowans Hospice has been the victim of a malicious cyber-attack affecting our website.
On Friday 14 August, we became aware that an unauthorised third party had gained access to parts of our website, including information submitted by individuals through some of our online forms.
The information potentially affected may include names, postal addresses, email addresses and telephone numbers.
At this stage, we have no evidence that any personal information has been misused, shared or published online. Importantly, we do not hold medical records, payment card details or bank account details on our website.
As a precaution, we encourage people to remain vigilant to any unexpected emails, text messages or telephone calls claiming to be from Rowans Hospice.
If you receive a communication claiming to be from Rowans Hospice and are unsure whether it is genuine, or if you have any questions or concerns, please contact us directly at info@rowanshospice.co.uk.
We fully understand the responsibility we have to look after the information people share with us, and as soon as we became aware of the incident, we took action to secure the website and have implemented the additional security measures recommended to us. This has included reviewing access permissions, updating credentials and strengthening our security controls. We will continue to monitor the situation closely and take any further action required.
The support of our community means a great deal to us and enables us to continue providing expert palliative and end-of-life care to people and families in Portsmouth and South East Hampshire.
Frequently Asked Questions
Could my personal information have been accessed?
An unauthorised third party gained access to parts of our website and some personal information submitted through our online forms may have been accessible. At this stage, we have no evidence that personal information has been misused, shared or published online.
What information may have been accessed?
Information potentially accessible through the affected parts of our website may have included information submitted through online forms, such as names, postal addresses, email addresses and telephone numbers. We do not hold medical records, payment card details or bank account details on our website.
Were my bank or payment card details compromised?
No. Payment card and bank account details are not held on the Rowans Hospice website and were not accessible through the affected website systems.
Was information about my donation accessed?
Some personal information submitted through our website may have been accessible. This could include your name, postal address, email address or telephone number. Payment card and bank account details are not held on our website and were not accessible through the affected systems.
Why are you telling us about this now?
As soon as we became aware of the incident on Friday 14 August, we took immediate steps to secure our website and prevent further unauthorised access.
Since then, we have been working with our technical specialists and Data Protection Officer to understand what happened, identify what information may have been affected and ensure appropriate security measures are in place.
We are sharing this information now that this initial work has enabled us to provide a clearer and more accurate picture of what happened.
Has this been reported to the Information Commissioner’s Office (ICO)?
Yes. We have reported the incident to the Information Commissioner’s Office and will continue to work with them as appropriate.
Is it safe to donate to Rowans Hospice?
Yes. We have taken immediate steps to secure our website and have implemented additional security measures recommended by our technical specialists.
Payment card and bank account details are not stored on the Rowans Hospice website.
If you would prefer not to donate online, please contact our Supporter Care Team on 023 9225 0001, and we will be happy to discuss alternative ways you can support Rowans Hospice.
What should I do if I receive a suspicious message?
Please be cautious of unexpected emails, text messages or telephone calls claiming to be from Rowans Hospice, particularly if you are asked to provide personal or financial information or to follow an unfamiliar link.
If you are unsure whether a communication is genuine, please do not respond to it. Instead, contact Rowans Hospice directly at info@rowanshospice.co.uk.