Madison Area YMCA Data Breach Exposes Social Security Numbers

Madison Area YMCA, a nonprofit organization that has served the Madison, New Jersey area for more than 150 years, disclosed a data breach.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on April 21, 2026.

The total number of individuals affected across the United States has not been publicly disclosed at this time.

Madison Area YMCA mailed out notification letters to affected individuals of the data breach; however, the notification provided limited details about the timeline and circumstances of the incident. The specific dates of the breach, including when it occurred and when it was discovered, were not detailed.

The personal information exposed in the breach included Social Security numbers.

Madison Area YMCA's response to the breach

Madison Area YMCA is offering affected individuals 24 months of complimentary identity protection services through Cyberscout. The package of services includes credit monitoring, dark web monitoring, a $1 million identity fraud loss reimbursement policy and fully managed identity theft recovery services.

Affected individuals must enroll within 90 days from the date printed on their notification letter to receive these services.

The organization has also established a dedicated phone line for those with questions or concerns about the incident. Affected individuals can call 1-833-397-4594, which is available Monday through Friday from 8 a.m. to 8 p.m. Eastern Time.

Steps to take if your information was exposed

• Place a security freeze on credit reports by contacting Equifax (1-800-525-6285), Experian (1-888-397-3742) and TransUnion (1-800-916-8800) to prevent new accounts from being opened without authorization.
• Request free credit reports at AnnualCreditReport.com and review them carefully for any unfamiliar accounts, hard inquiries or other suspicious activity.
• Consider placing a fraud alert with one of the three major credit bureaus, which will automatically notify the other two and require extra verification before new credit is issued.
• Monitor financial accounts and statements regularly for any unauthorized transactions or suspicious charges.
• File a police report if any signs of identity theft are discovered, as Massachusetts law provides affected individuals the right to file a report and obtain a copy of it.
• Be cautious of phishing attempts that reference Madison Area YMCA or this data breach by name, as scammers often exploit breach notifications to trick people into sharing additional personal information.