Mt. Juliet Man Charged in Nonprofit Database Breach
A former employee faces federal charges for allegedly stealing private data from a Nashville nonprofit.
Updated on Sept. 30, 2026 in Financial Crime
Live Poll
Do you trust local charities to keep your personal donor data secure from internal misuse?
Federal prosecutors have charged Andrew Collie of Mt. Juliet with unauthorized access of a protected computer. Authorities allege Collie stole contact information for over 80,000 donors from the Nashville-based nonprofit Hope for Justice.
Why it matters
The case highlights the severe risks of insider threats to nonprofit databases, where sensitive donor information is a primary target. Allegations suggest the data was compromised to benefit Collie's own personal philanthropic interests.
Collie faces a federal felony charge carrying a maximum fine of $250,000 and five years in prison. The ongoing investigation traced the breach to a fraudulent administrator account created within the organization's database.
The players
Andrew Collie
He is a Mt. Juliet resident and former employee of Hope for Justice who faces federal felony charges.
Hope for Justice
This is a Nashville-based nonprofit organization that manages charitable donor data.
Sole Hope
This is a philanthropic organization where the defendant previously served as Director of Philanthropy.
The details
Prosecutors claim that Collie, who was employed at the Nashville nonprofit for three years, utilized a false administrator account to gain unauthorized access. A related civil lawsuit further alleges that he manipulated private donor records by altering phone numbers and email addresses to enrich himself.
Timeline
Collie resigned from Hope for Justice in 2023.
Collie left his role at Sole Hope earlier in 2026.
Collie was charged with a federal felony on September 24, 2026.
Legal Context
The charges filed against the defendant follow the established enforcement pattern set by the Computer Fraud and Abuse Act regarding unauthorized database access. Such prosecutions have become a critical mechanism for addressing internal cybersecurity breaches in the nonprofit sector.
Residents and local donors are advised to monitor their communications for potential phishing attempts stemming from the compromised contact information. Organizations in the area are encouraged to review internal security protocols to prevent similar unauthorized administrator access.
The takeaway
Maintaining strict administrative controls is essential for any organization handling sensitive personal data. Employees with high-level access should undergo regular credential audits to minimize the risk of insider data manipulation.
Further reading
For more on how organizations address internal data risks, visit the Financial Crime section.
Source note: This article includes information reported by WKRN News 2.
Live Poll
Do you trust local charities to keep your personal donor data secure from internal misuse?
