A charity organization experienced a phishing-based cyber attack, a common threat in the sector (83% of charities reported such incidents in 2024). The attack led to a data breach involving donors' personal and financial details, including bank statements and National Insurance numbers, which were exposed due to an employee falling victim to a fraudulent email. While no ransomware was involved, the incident triggered reputational damage after local media reported the breach, eroding supporter trust. The charity also faced financial penalties for non-compliance with UK data protection laws, compounding losses from fraudulent transactions initiated using the leaked donor data. Operational disruptions occurred as the charity paused digital fundraising campaigns to contain the breach, further straining its budget during an economic crisis. The attack highlighted vulnerabilities in staff training, as the phishing email bypassed basic security protocols like multi-factor authentication.