ESTEBAN Morin, Head of Legal at VRChat, discussed a data breach notice mistakenly associated with the company due to a fraudulent submission on the Maine Attorney General's website. Despite no actual data compromise, the notice led to widespread misinformation and reputational damage for VRChat. The notice, created on fake letterhead by an unknown party, was up for over 24 hours before VRChat managed to initiate contact with the AG’s office and mitigate the situation.
The AG's office has since taken down their public breach tool to prevent future fraudulent reports. This incident raises concerns about whether other states publish breach reports without proper validation.