BreachPublished 15 Jun 2026

Maine Disables Data Breach Portal Due to Fake Submissions

Source SecurityWeek

Description

Someone posted fake VRChat and Discord data breach reports on the system, prompting the Maine AG to take action. The post Maine Disables Data Breach Portal Due to Fake Submissions appeared first on SecurityWeek .

Impact

The immediate impact was the temporary unavailability of Maine's public data breach portal, reducing transparency for breach notifications in the state. The fake submissions could have caused misinformation and reputational harm to the targeted companies. No evidence indicates that the fake reports resulted from a technical vulnerability or that any actual data breaches occurred as part of this incident. The disruption affects public access to breach data but does not indicate a compromise of the portal's underlying systems.

Defensive guidance

The Maine Attorney General has disabled the public-facing data breach portal and is reviewing submission procedures to prevent future fake reports. Organizations can continue to submit breach notifications to the Maine AG through existing channels. Security professionals should monitor the Maine AG's updates for when the portal is reinstated and any new submission validation measures. No direct technical remediation is required by external parties as this incident stems from abuse of the reporting process rather than a software vulnerability.

Summary

The Maine Attorney General's data breach portal, which publicly catalogs data breach notifications, was taken offline after receiving fraudulent breach reports falsely attributed to VRChat and Discord. The fake VRChat report claimed 2.4 million affected users and was submitted using counterfeit letterhead and a fictitious contact. The Discord report claimed 10 million affected users, inconsistent with the company's confirmed breach affecting approximately 70,000 individuals. These hoaxes prompted the Maine AG to disable the public-facing database and review submission procedures to reduce abuse. Legitimate breach reporting remains operational.

References

securityweek.com/maine-disables-data-breach-portal-due-to-fake-submissions/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 15 Jun 2026, 08:45 UTC

References

Community reviews