YMCA in Twin Cities reveals data breach, says software vendor paid ransom to hacker

Details impacted include members' names and addresses.
Publish date:

The YMCA of the North, the new name of the Twin Cities-based arm of the organization, says some of its members' personal information may have been compromised in a breach.

The YMCA wrote to members saying that one of its software application vendors, Blackbaud Inc., was targeted in a ransomware hack that targeted the data it hosts for various organizations, colleges, universities and nonprofits across the globe.

Blackbaud determined that backup files were removed from its platform sometime between February and May this year, with the YMCA of the North notified on July 16.

The YMCA says it doesn't yet know the "complete picture" of the data contained in its backup files, though it does know it included members' names, physical address, email address and gift history.

Notes will be sent to those affected by the breach once it has completed its investigation.

The YMCA says Blackbaud paid the ransom amount to the hacker and received "confirmation and assurances that the data removed from Blackbaud’s applications has been destroyed."

It also worked with law enforcement and third-party experts that say the hackers' "assurances are credible."

"Blackbaud has hired outside experts to continue to monitor the Internet, including the 'Dark Web,' and they have found no evidence that any information was ever released by the threat actor," YMCA Senior VP Bob Elfstrand said. "Furthermore, Blackbaud plans to continue such monitoring activities for the foreseeable future."

Members have been asked to wait for further communication from the YMCA that will detail whether their information was compromised.

Sign up for our BREAKING NEWS newsletters

Aug. 25 Weather with Sven: 

Next Up

Screen Shot 2021-01-18 at 3.17.49 PM

No KAT? No D'Lo? No problem as Timberwolves defeat Pelicans

The Timberwolves were without Karl-Anthony Towns and D'Angelo Russell, but still picked up a (SCORE) win.

Screen Shot 2021-01-23 at 7.53.44 PM

Spinouts, crashes across Twin Cities as snow gets heavier

There have been multiple incidents across the metro area.

Mason Branstrator

Family, friends raising funds for teen soccer standout with spinal injury

Mason Branstrator of Duluth was injured in a skiing accident.

Screen Shot 2021-01-22 at 9.08.16 PM

Tributes pour in after MN Supreme Court justice's daughter found dead

Olivia Chutich died near the campus of Iowa State University.

Image from iOS (96)

Early Saturday fire damages Burger King in Richfield

The fire was reported around 1:15 a.m. Saturday.

Jamal Mashburn Jr. / Gopher Basketball

Maryland hands Gophers first home loss of season

The 17th-ranked Gophers fell to the Terrapins 63-49 on Saturday afternoon.

Alibi Drinkery in Lakeville.

Minnesota Department of Health files lawsuit against Alibi Drinkery

The Lakeville bar has been in the news for defying orders.

Iron Tap snowmobile delivery

This MN restaurant will deliver to your ice house... on a snowmobile

Just in case you work up an appetite fishing on Lake Waconia.

Klobuchar and Trump

Klobuchar reacts to report Trump plotted against his attorney general

The NYT story alleges further tactics to overturn the election.



YMCA to stagger reopening of Twin Cities locations

The Y hopes all metro locations will be open again by early August.

Screen Shot 2020-07-23 at 10.20.12 AM

Downtown St. Paul YMCA will not reopen

YMCAs across the Twin Cities were intially required to close in March.


YMCA closes, plans to help 'those who need us most' during pandemic

It plans to help families of "essential" workers during the COVID-19 outbreak.

The Uber data breach: What you need to know

Personal information of 57 million Uber users was accessed.

Star Tribune

Hacker group targets Star Tribune subscribers

The news organization said no financial information is at risk for the site's 1 million user records.