Beacon CRM, used by over 1,500 UK charities, has confirmed a breach where database backups were likely downloaded by an unauthorised third party. Here's what happened and how to defend against this kind of supply-chain attack.