Publish date:

YMCA in Twin Cities reveals data breach, says software vendor paid ransom to hacker

Details impacted include members' names and addresses.

The YMCA of the North, the new name of the Twin Cities-based arm of the organization, says some of its members' personal information may have been compromised in a breach.

The YMCA wrote to members saying that one of its software application vendors, Blackbaud Inc., was targeted in a ransomware hack that targeted the data it hosts for various organizations, colleges, universities and nonprofits across the globe.

Blackbaud determined that backup files were removed from its platform sometime between February and May this year, with the YMCA of the North notified on July 16.

The YMCA says it doesn't yet know the "complete picture" of the data contained in its backup files, though it does know it included members' names, physical address, email address and gift history.

Notes will be sent to those affected by the breach once it has completed its investigation.

The YMCA says Blackbaud paid the ransom amount to the hacker and received "confirmation and assurances that the data removed from Blackbaud’s applications has been destroyed."

It also worked with law enforcement and third-party experts that say the hackers' "assurances are credible."

"Blackbaud has hired outside experts to continue to monitor the Internet, including the 'Dark Web,' and they have found no evidence that any information was ever released by the threat actor," YMCA Senior VP Bob Elfstrand said. "Furthermore, Blackbaud plans to continue such monitoring activities for the foreseeable future."

Members have been asked to wait for further communication from the YMCA that will detail whether their information was compromised.

Sign up for our BREAKING NEWS newsletters

Aug. 25 Weather with Sven: 

Next Up

Dean Evason

Wild fall flat against Predators, lose first game of season

The Wild couldn't stay out of the penalty box in a 5-2 loss.

Screen Shot 2021-10-24 at 10.11.36 AM

Search for Wisconsin woman whose vehicle was found near Hinckley

Ashley L. Miller, 33, was reported missing on Sep. 24 after her vehicle was found without her in it.

Dak Prescott

Report: Dak Prescott will be 'ready to go' for matchup with Vikings

The Dallas quarterback is expected to be available for next Sunday's showdown.

Eddie Rosario

Where Eddie Rosario's championship series heroics rank since 2000

The former Twin put together an all-timer to help the Braves reach the World Series.

plane, Piper PA-32

2 dead after plane crashes near residence in rural Wisconsin

The aircraft also struck the house during the crash.

Screen Shot 2021-10-23 at 9.38.43 PM

1 dead after van crashes and lands on Highway 100 in Brooklyn Center

Northbound Highway 100 was shut down following the crash Saturday night.

Jess Peterson

Woman killed in crash ID'd as 'bad ass biker chick' with 'giving spirit'

The 30-year-old died in a motorcycle crash on Oct. 19.

Karl-Anthony Towns

Timberwolves' defense fuels win over Pelicans

The Wolves' have bought in on the defensive end as part of a 2-0 start.

Minnesota Wild

Ryan Hartman's OT goal helps Wild stay undefeated

The Wild improved to 4-0 with a win over the Ducks.

Mar'Keise Irving / Gopher Football

Gophers pound Maryland to stay in Big Ten West race

Four different players scored a rushing touchdown in a 34-16 victory over Maryland.



YMCA to stagger reopening of Twin Cities locations

The Y hopes all metro locations will be open again by early August.

Screen Shot 2020-07-23 at 10.20.12 AM

Downtown St. Paul YMCA will not reopen

YMCAs across the Twin Cities were intially required to close in March.


YMCA closes, plans to help 'those who need us most' during pandemic

It plans to help families of "essential" workers during the COVID-19 outbreak.

minneapolis parking meter

Minneapolis parking app experienced data breach in March

No credit card information was accessed in the breach.

Star Tribune

Hacker group targets Star Tribune subscribers

The news organization said no financial information is at risk for the site's 1 million user records.