Maine Portal Hosts Fake Breach Notices

The update adds concrete detail to the fraudulent VRChat notice, including the claimed scale and specific data categories, while confirming VRChat's denial and Maine's view that both the VRChat and Discord filings were hoaxes. It also clarifies that the portal was temporarily taken offline because submissions could be posted before validation.

The story is now more clearly framed as an operational abuse of Maine's breach-reporting process, with added emphasis that the state has removed false notices and is reviewing verification procedures. Coverage also more explicitly situates the incident around hoax filings rather than any confirmed VRChat or Discord breach.

Maine has escalated the episode from a bogus breach notice issue to an active portal-response problem by taking the public reporting system offline and reviewing its verification process. The story now emphasizes operational and regulatory consequences from abuse of the disclosure channel, not just the false VRChat filing itself.

• Maine took its public breach reporting portal offline.
• The attorney general's office is reviewing intake and verification procedures.
• Fraudulent notices named both VRChat and Discord.
• False filings used inflated affected-user counts and fabricated company details.
• The incident is now framed as enabling phishing and scam-page abuse.

Fraudulent data breach notices were posted through Maine's public Attorney General portal, including a false filing claiming VRChat had suffered a major breach. VRChat denied submitting the notice and said the named employee did not exist, while Maine officials said submissions can be posted before independent validation. The episode highlights how weak portal vetting can let misinformation appear official and trigger reputational and security concerns.