Evangelical Alliance statement on cyber security incident

We are deeply pained to have to let you know that we at the Evangelical Alliance have been the victims of a significant cyber-attack and our database has been compromised. We are not aware at this stage that the attempt to steal our data has been successful, but we would like to take this opportunity to help our contacts protect themselves from fraud or any other potential negative impact of any data disclosure.

As soon as we discovered this incident, we immediately took our systems offline. In addition, we launched a forensic investigation led by external experts to identify exactly the extent of the breach and whether our contacts' information is involved. There is no evidence that any data was removed from our systems, however, we strongly recommend that they follow these steps, as outlined by Action Fraud:

1. Be wary of anyone asking for your details: Don’t give any personal information (name, address, bank details, email or phone number) to anyone who calls you claiming to represent a business, bank or organisation you use. End the call, make sure the line is clear, and call the organisation in question on a number you trust.

2. Be especially wary of emails: Banks and financial institutions won’t send emails asking you to click on a link and confirm your bank details. Do not trust such emails, even if they look genuine. You can always call your bank using the phone number on a genuine letter, website (typed directly into the address bar) or the phone book to check if you’re not sure.

• Never automatically click on a link in an unexpected email or text.
• Remember, email addresses and phone numbers can be spoofed, so don't use those as a means to verify that a message or call is authentic.
• The best way to get in touch with a company is to use a known email or phone number, such as the one on the back of your bank card.

3. Look out for unexpected bills or items on your bank statement: If you spot any unexpected charges or activity on a bank or credit card statement, or if you receive bills, invoices or receipts for things that you haven’t bought, or if financial institutions you don’t normally deal with contact you about outstanding debts; take action and contact your bank or credit card provider on a trusted number. Your identity may have been stolen.

4. Keep your devices protected: Make sure your computer has up-to-date anti-virus software and a firewall installed. Ensure your browser is set to the highest level of security and monitoring to prevent malware issues and computer crimes.

5. Be careful when shopping online: Layer up your protection. When shopping online, always check the web address to make sure you are on the correct site and sign up to Verified by Visa or MasterCard Secure Code whenever you are given the option while shopping online. This involves you registering a password with your card company and adds an additional layer of security to online transactions with signed-up retailers.

6. Check your credit report: You should regularly get a copy of your credit file and check it for entries you don’t recognise. Callcredit, Equifax and Experian can all provide your credit file. An identity protection service such as ProtectMyID monitors your Experian credit report and alerts you by email or SMS to potential fraudulent activity. If it's fraud, a dedicated caseworker will help you resolve everything.

We are aware that our contacts may have more questions, and to help us to answer them we’ve set up a dedicated email inbox: Help. We won’t be able to respond to emails individually at this stage, and we are asking our contacts not to send any sensitive information to us in their emails, but we will produce a set of FAQs based on their emails. We are so grateful to everyone who has sent us messages of prayer and support as we navigate this very challenging time.