ActionAid International Breach — May 2026
NGO ActionAid International was breached in early May 2026 by the threat actor Bavacai, with donor and beneficiary data leaked.
- Donor contact details
- Beneficiary records
- Project-area metadata
NGO ActionAid International was breached in early May 2026 by the threat actor Bavacai. The leaked dataset includes donor contact details, beneficiary records, and project-area metadata. NGO data is sensitive both for donor privacy and beneficiary safety — beneficiary records often include people in vulnerable situations whose safety depends on those records remaining private.
What You Should Do
- ActionAid donors: monitor for fraudulent charitable solicitations
- NGO beneficiaries: contact ActionAid for breach-impact briefing
- Be alert for phishing referencing your past donations
Sources
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15.4B+ leaked records in 15 seconds — then show you the $19 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →