Cyber Updates

Important Notice Regarding a Data Security Incident 28.8.26

Dear church family,

We're writing to let you know about a data security incident involving our church management system, Elvanto, which we use to store contact information. This is a separate incident from the one that occurred back in May.

We recently became aware that an unauthorised user gained access to data stored within our Elvanto system. The fraudulent email we warned you about yesterday, sent from an address impersonating Dave, is connected to this incident. Based on our current understanding, the information that may have been accessed includes:

  • Names
  • Email addresses
  • Phone numbers
  • Residential addresses
  • Other information pertaining to membership, baptism, WWCC status and volunteer departments

At this stage, we have no evidence that the information has been publicly released or misused. However, because personal information may have been accessed, we believe it is important to inform you promptly and transparently.

We recognise that receiving this email may be concerning, and we are sorry for the worry this may cause.

What this means for you

The primary risk is that someone could use your contact information to send emails, text messages, or make phone calls that appear to come from our church or another trusted organisation.

Please be cautious if you receive unexpected communications asking you to:

  • Provide personal information
  • Share passwords or verification codes
  • Transfer money or make payments
  • Click on unfamiliar links or download attachments

Our church will never ask you to provide passwords, banking details, or security codes via email, text message, or phone call.

What we are doing

We are taking this matter very seriously and have acted immediately to investigate and secure our systems.

The steps we have taken include:

  • Securing access to the affected system
  • Working to understand the nature and extent of the incident and determine any appropriate next steps
  • Reviewing our security settings and access controls
  • Reviewing the potential impact on individuals whose information is stored in the system and monitoring for any further developments
  • Seeking advice regarding our privacy and notification obligations

We will continue to monitor the situation closely and will provide further updates if additional information becomes available.

What you can do

As a precaution, we recommend that you:

  • Remain alert to suspicious emails, text messages, or phone calls
  • Verify unexpected requests for information directly with the church using contact details you already know to be genuine
  • Avoid clicking links in unsolicited messages
  • Contact us if you receive a communication that appears suspicious or claims to be from our church

Further Information

If you have any questions or concerns about this incident, please contact us at office@hillsbaptist.com or 08 83391243. We will endeavour to respond to your queries as soon as possible.

We value the trust you place in us and deeply regret that this incident has occurred. We are committed to caring for your information responsibly and keeping you informed as we learn more.

Thank you for your understanding, your patience, and your prayers as we work through this matter.

God bless,

Dave Shepherd & HBC Governing Council

Hills Baptist Church