Skip to content
OriginalSign in

DataBreachesDissent

VRChat Faces Misinformation After Data Breach Notice on Maine Site

Part of the VRChat story · since 11 Jun

Quiet for 20 weekslast report 18 Jun5 articles4 outlets
11 Jun · Malwarebytes first24 Aug18 SepNowThis article5th of 5
  • Thu 11 Jun, 11:50 UTC. Malwarebytes, first report. VRChat breach exposes 2.4M users’ emails, login history.
  • Mon 15 Jun, 07:30 UTC. Malwarebytes. UK Will Require Child Phones to Block Nude Images by September.
  • Mon 15 Jun, 08:40 UTC. SecurityWeek, its first report on the story. Maine AG halts breach portal after VRChat, Discord claims.
  • Mon 15 Jun, 09:10 UTC. Infosecurity, its first report on the story. Maine takes breach portal down after fake VRChat, Discord filings.
  • Thu 18 Jun, 11:48 UTC. DataBreaches, its first report on the story. VRChat Faces Misinformation After Data Breach Notice on Maine Site. This article, 5th of 5.

Esteban Morin, Head of Legal at VRChat, discussed a data breach notice mistakenly associated with the company due to a fraudulent submission on the Maine Attorney General's website. Despite no actual data compromise, the notice led to widespread misinformation and reputational damage for VRChat. The notice, created on fake letterhead by an unknown party, was up for over 24 hours before VRChat managed to initiate contact with the AG’s office and mitigate the situation.

The AG's office has since taken down their public breach tool to prevent future fraudulent reports. This incident raises concerns about whether other states publish breach reports without proper validation.

How the story developed

All 5 articles
Quiet for 20 weekslast report 18 Jun5 articles4 outlets

5 articles from 4 outlets since 11 Jun. Quiet since 18 Jun. This was the 5th report, 7 days after the first.

Now11 Jun121314151617181920First reportMalwarebytes · 11 Jun, 11:50This article5th of 5 · day 7
  • Thu 11 Jun, 11:50 UTC. Malwarebytes, first report. VRChat breach exposes 2.4M users’ emails, login history.
  • Mon 15 Jun, 07:30 UTC. Malwarebytes. UK Will Require Child Phones to Block Nude Images by September.
  • Mon 15 Jun, 08:40 UTC. SecurityWeek, its first report on the story. Maine AG halts breach portal after VRChat, Discord claims.
  • Mon 15 Jun, 09:10 UTC. Infosecurity, its first report on the story. Maine takes breach portal down after fake VRChat, Discord filings.
  • Thu 18 Jun, 11:48 UTC. DataBreaches, its first report on the story. VRChat Faces Misinformation After Data Breach Notice on Maine Site. This article, 5th of 5.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Thu 11 JunDay 01
    1. VRChat breach exposes 2.4M users’ emails, login history11:50 · Malwarebytes · First report

  2. Quiet for 4 days

    Mon 15 JunDay 43
    1. UK Will Require Child Phones to Block Nude Images by September07:30 · Malwarebytes · Picked up again
    2. Maine AG halts breach portal after VRChat, Discord claims08:40 · SecurityWeek
    3. Maine takes breach portal down after fake VRChat, Discord filings09:10 · Infosecurity

  3. Quiet for 3 days

    Thu 18 JunDay 71
    1. VRChat Faces Misinformation After Data Breach Notice on Maine Site11:48 · DataBreaches · Picked up again · This article, 5th of 5

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in