The Maine Attorney General's data breach portal, which publicly catalogs data breach notifications, was taken offline after receiving fraudulent breach reports falsely attributed to VRChat and Discord. The fake VRChat report claimed 2.4 million affected users and was submitted using counterfeit letterhead and a fictitious contact. The Discord report claimed 10 million affected users, inconsistent with the company's confirmed breach affecting approximately 70,000 individuals. These hoaxes prompted the Maine AG to disable the public-facing database and review submission procedures to reduce abuse. Legitimate breach reporting remains operational.

The immediate impact was the temporary unavailability of Maine's public data breach portal, reducing transparency for breach notifications in the state. The fake submissions could have caused misinformation and reputational harm to the targeted companies. No evidence indicates that the fake reports resulted from a technical vulnerability or that any actual data breaches occurred as part of this incident. The disruption affects public access to breach data but does not indicate a compromise of the portal's underlying systems.

The Maine Attorney General has disabled the public-facing data breach portal and is reviewing submission procedures to prevent future fake reports. Organizations can continue to submit breach notifications to the Maine AG through existing channels. Security professionals should monitor the Maine AG's updates for when the portal is reinstated and any new submission validation measures. No direct technical remediation is required by external parties as this incident stems from abuse of the reporting process rather than a software vulnerability.