Maine closes data breach portal to the public after fake reports

Source: The Record

A widely used data breach reporting portal published by the state of Maine was closed to the public after two fake breach notices were posted. One of the bogus notices appeared last week under the name of a nonexistent VRChat employee and reportedly claimed 2.4 million customers of the virtual reality social platform were breached. The breach report was submitted on fake VRChat letterhead, the company said. A fake breach notice also was posted for Discord. The Maine reporting portal has been a valuable resource for security researchers, reporters and companies working in threat intelligence and lack of public access to it could have an impact on those communities. The portal was easy to abuse — it has historically allowed companies to add notices to the site without review. Full Story