Confirmed breach

YMCA of Southern Maine data breach

USUnited States

YMCA of Southern Maine (United States) notified the Vermont Attorney General and the Indiana Attorney General of a data breach on 14 July 2026. It told the states about 6 Vermont residents; the total can be higher. Exposed: Social Security numbers and Financial account and card details.

Status: Confirmed breach
People affected: 6 Vermont residents (one state’s count; the total can be higher)
Reported: 14 July 2026
Across the state notices: at least 7 people (Vermont and Indiana: each state counts only its own residents)

What was exposed

Social Security numbers
Financial account and card details

Sources

Official notices are read by code from the regulator’s own register. More notices to Vermont, Indiana. · Corrections and changes

If YMCA of Southern Maine had your data

Look for YMCA of Southern Maine’s own notice or letter: it should say what of yours was involved. Keep it.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Expect scams that use your details: calls, texts or emails pretending to be YMCA of Southern Maine, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

More breaches in United States

Every breach in United States →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.