Skip to main content

YMCA in Twin Cities reveals data breach, says software vendor paid ransom to hacker

Details impacted include members' names and addresses.
YMCA

The YMCA of the North, the new name of the Twin Cities-based arm of the organization, says some of its members' personal information may have been compromised in a breach.

The YMCA wrote to members saying that one of its software application vendors, Blackbaud Inc., was targeted in a ransomware hack that targeted the data it hosts for various organizations, colleges, universities and nonprofits across the globe.

Blackbaud determined that backup files were removed from its platform sometime between February and May this year, with the YMCA of the North notified on July 16.

The YMCA says it doesn't yet know the "complete picture" of the data contained in its backup files, though it does know it included members' names, physical address, email address and gift history.

Notes will be sent to those affected by the breach once it has completed its investigation.

The YMCA says Blackbaud paid the ransom amount to the hacker and received "confirmation and assurances that the data removed from Blackbaud’s applications has been destroyed."

It also worked with law enforcement and third-party experts that say the hackers' "assurances are credible."

"Blackbaud has hired outside experts to continue to monitor the Internet, including the 'Dark Web,' and they have found no evidence that any information was ever released by the threat actor," YMCA Senior VP Bob Elfstrand said. "Furthermore, Blackbaud plans to continue such monitoring activities for the foreseeable future."

Members have been asked to wait for further communication from the YMCA that will detail whether their information was compromised.

Sign up for our BREAKING NEWS newsletters

Aug. 25 Weather with Sven: 

Next Up

Gov. Tim Walz and Scott Jensen.

Walz agrees to two October debates with Jensen

The two debates will take place Oct. 18 and Oct. 28.

1644 Harmon Pl, Minneapolis, Minnesota - June 2022

Man fatally shot across the street from Loring Park in Minneapolis

An altercation broke out outside of a business before the shooting, police say.

ambulance

17-year-old ejected, killed in airborne crash on Highway 200

The crash happened around 1 a.m. Sunday in Cass County.

unsplash - school classroom students

8 Minnesota schools recognized as National Blue Ribbon Schools

Almost 300 schools were recognized nationwide.

Screen Shot 2022-09-17 at 4.10.40 PM

Investigation after 30 vehicles found burning in St. Paul

The discovery was made early Saturday morning.

Minneapolis police

6 injured in 2 downtown shootings Saturday morning

The shootings happened just a few minutes apart.

Chad Myszka

Police still searching for 'dangerous' suspect in Wisconsin

Authorities called off their search for Chad Myszka Friday night, resuming Saturday morning.

Tinklenberg

Charges: Man killed his 93-year-old grandmother with hatchet

The 42-year-old has been charged with murder.

Storm

Severe storms possible in MN Saturday afternoon, evening

The NWS says all severe weather hazards are on the table.

Screen Shot 2022-09-16 at 4.34.12 PM

Former Forest Lake teacher sentenced for sexual assaulting 2 students

An attorney in the case is calling out the Archdiocese of St. Paul and Minneapolis to "act."

Related

YMCA

YMCA to stagger reopening of Twin Cities locations

The Y hopes all metro locations will be open again by early August.

Screen Shot 2020-07-23 at 10.20.12 AM

Downtown St. Paul YMCA will not reopen

YMCAs across the Twin Cities were required to close in March.

YMCA

YMCA closes, plans to help 'those who need us most' during pandemic

It plans to help families of "essential" workers during the COVID-19 outbreak.

minneapolis parking meter

Minneapolis parking app experienced data breach in March

No credit card information was accessed in the breach.

Star Tribune

Hacker group targets Star Tribune subscribers

The news organization said no financial information is at risk for the site's 1 million user records.