Maine Disables Breach Notification Portal After Fakes

Maine's Attorney General's Office disabled its public data breach notification portal after it was flooded with fake submissions impersonating Discord and VRChat.

According to public reporting, the fraudulent notices claimed massive data breaches, including one that falsely stated Discord had been breached and affected 10 million users. Similar fake disclosures targeted VRChat. The portal, which had allowed anyone to submit breach reports without prior verification, was taken offline on June 12, 2026, while the state reviews its procedures to prevent further abuse. No real customer data from Maine residents was exposed in the incident itself. The fake postings created confusion because they appeared on an official government website, leading some people to believe their information from those gaming platforms had been compromised.

This matters for you and your family because even a false breach notice can trigger real harm. When a notice appears on what looks like an official state site, many people react by changing passwords, monitoring accounts, or clicking links in follow-up emails from scammers who exploit the situation. If you or your children use Discord, VRChat, or any connected gaming services, the noise from these fakes makes it harder to spot actual leaks that could expose email addresses, usernames, or linked phone numbers.

The doxxing and identity-chain implications are significant. A single leaked username or email from a gaming platform often serves as the starting point for attackers to connect additional accounts across social media, forums, and cloud services. Once those links are mapped, bad actors can build a complete profile that includes home address, family member names, and children's accounts. Public reporting indicates that credential leaks from gaming services frequently cascade into account takeovers, harassment, and full doxxing campaigns. What begins as a fake breach notice can still prompt real reconnaissance against your household if you respond in predictable ways or reuse credentials.

What to do

• Run a DoxxScan to map every link between your gaming handles, emails, phone numbers, and real-world identity, then complete the no-subscription cleanup of exposed data.
• Rotate any password you used on Discord, VRChat, or similar gaming platforms and enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next legitimate exposure is caught and addressed within hours instead of months.
• Cover the entire household with DoxxScan family protection that includes dependents and children's gaming accounts which often chain back to the same addresses and family identities.
• Let DoxxScan remediation specialists manage takedown requests for any personal information already circulating on data broker sites and underground forums.

The incident shows that official-looking channels can be weaponized, making it harder for ordinary families to know what is real. A forward-looking approach means treating every potential exposure seriously and maintaining constant visibility into how your information travels online. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 15.4B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children's gaming accounts.