Maine Takes Breach Portal Offline After Fake Discord and VRChat Notices
Summary
Maine temporarily disabled public access to its breach-notification portal after fake disclosures impersonating Discord and VRChat were submitted. The state removed the hoaxes and is reviewing procedures; VRChat confirmed its filing was fraudulent.
Key points
- Maine’s Attorney General’s Office said false breach reports impersonating Discord and VRChat were submitted by an unknown entity unrelated to either company.
- VRChat confirmed its filing was fraudulent and used a fictitious employee name; Discord did not respond to BleepingComputer’s inquiry.
- The fraudulent VRChat notice claimed a breach affecting more than 2.4 million people.
- The state removed the false filings and temporarily disabled public access to its breach-notification database while reviewing procedures.
- Companies can still submit breach notices, but members of the public must contact the Attorney General’s Office to obtain copies.
- The portal previously published submissions automatically, allowing false disclosures to spread misinformation about alleged breaches.
Article Details
- Event Type
- Fraudulent data breach disclosures submitted through Maine’s public breach reporting portal
- Impact
- False filings impersonating Discord and VRChat were published and later removed. The VRChat filing falsely claimed a breach affecting over 2.4 million people; VRChat confirmed it was fraudulent. Maine temporarily disabled public access to the database while reviewing procedures, and members of the public must contact the Attorney General’s Office for copies of disclosures.
Products
DiscordMaine temporarily took its public breach reporting portal offline after fake disclosures impersonating Discord and VRChat were published through the state system.VRChatMaine temporarily took its public breach reporting portal offline after fake disclosures impersonating Discord and VRChat were published through the state system.