Madison Area YMCA Discloses Data Breach Exposing Social Security Numbers The Madison Area YMCA, a nonprofit serving Madison, New Jersey, for over 150 years, recently reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation on April 21, 2026. While the total number of affected individuals across the U.S. remains undisclosed, the breach exposed Social Security numbers, prompting the organization to send notification letters to impacted parties. Details about the breach including when it occurred, how it was discovered, and the exact timeline were not provided in the notification. In response, the YMCA is offering 24 months of complimentary identity protection services through Cyberscout, which includes credit monitoring, dark web monitoring, a $1 million identity fraud loss reimbursement policy, and fully managed identity theft recovery services. Affected individuals must enroll within 90 days of the date on their notification letter to access these benefits. For further inquiries, the YMCA has set up a dedicated phone line (1-833-397-4594) available Monday through Friday, 8 a.m. to 8 p.m. Eastern Time. The full scope and impact of the breach are still under review.