Maine Takes Public Breach-Reporting Portal Offline After Fake VRChat and Discord Notices
Summary
Maine restricted public access to its breach portal after fake notices named VRChat and Discord. The state is reviewing safeguards; VRChat said it had no reason to believe its systems or data were compromised.
Key points
- Maine removed fake breach notices submitted in the names of VRChat and Discord.
- One bogus notice claimed 2.4 million VRChat customers were affected.
- VRChat said the notice used fake letterhead, that it did not submit an official breach notice, and that it had no reason to believe its systems or data were compromised.
- Maine said it has no knowledge of recent legitimate breach reports from either company.
- Companies can still submit breach reports, but public access to the database will remain offline while Maine reviews procedures to prevent abuse.
- The public can contact the attorney general’s office to ask about existing reports; the loss of public access may affect researchers, reporters, and threat-intelligence work.
Article Details
- Event Type
- Maine closed public access to its breach reporting portal after fraudulent breach notices were posted for VRChat and Discord.
- Impact
- The fake notices included an unsubstantiated claim that 2.4 million VRChat customers were affected. Maine said the notices were removed and it had no knowledge of recent legitimate breach reports from either company. VRChat said it had no reason to believe its data or systems were compromised and had not submitted an official breach notice. Public access to the portal will remain offline while Maine audits and improves its procedures, potentially limiting access to breach information for researchers, reporters, and companies.
Products
DiscordMaine shut down public access to its breach reporting portal after fake notices were posted in the names of VRChat and Discord, including one bogus claim that 2.4 million VRChat customers were breached.VRChatMaine shut down public access to its breach reporting portal after fake notices were posted in the names of VRChat and Discord, including one bogus claim that 2.4 million VRChat customers were breached.