Maine breach-notification portal hoax — fraudulent filings against VRChat and Discord, then the portal goes dark

A two-day arc that doubles as a fake-news cautionary tale. On 12 June, Maine's Attorney-General breach-notification portal published two fraudulent filings — one claiming a 2.4-million-user VRChat compromise, another a 10-million-user Discord breach — because the portal accepted submissions without verifying the submitter; both companies denied any breach (BleepingComputer; daily 06-12). On 12 June the Maine AG issued a formal statement confirming the filings were a hoax and took the portal offline (Maine AG; daily 06-13). The defender lesson is sourcing discipline: a government breach-notification portal is normally a high-reliability primary, but an unauthenticated submission path turned it into a vector for fabricated breach claims. Treat single-portal breach assertions as claim-only until the named victim confirms.