The California Office of the Attorney General reported a data breach involving the State of Maine on November 27, 2023. The breach occurred when cybercriminals exploited a software vulnerability in the MOVEit file transfer tool between May 28, 2023, and May 29, 2023, potentially affecting numerous individuals, though the specific number is unknown. Individuals may have had their names and additional personal information compromised.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-577070
TPRM report: https://www.rankiteo.com/company/stateofmaine
"id": "sta1030072725",
"linkid": "stateofmaine",
"type": "Vulnerability",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Public Sector',
'location': 'Maine, USA',
'name': 'State of Maine',
'type': 'Government'}],
'attack_vector': 'Software Vulnerability',
'data_breach': {'personally_identifiable_information': True,
'type_of_data_compromised': ['Names',
'Additional personal '
'information']},
'date_detected': '2023-11-27',
'date_publicly_disclosed': '2023-11-27',
'description': 'The California Office of the Attorney General reported a data '
'breach involving the State of Maine on November 27, 2023. The '
'breach occurred when cybercriminals exploited a software '
'vulnerability in the MOVEit file transfer tool between May '
'28, 2023, and May 29, 2023, potentially affecting numerous '
'individuals, though the specific number is unknown. '
'Individuals may have had their names and additional personal '
'information compromised.',
'impact': {'data_compromised': ['Names', 'Additional personal information']},
'references': [{'date_accessed': '2023-11-27',
'source': 'California Office of the Attorney General'}],
'threat_actor': 'Cybercriminals',
'title': 'Data Breach Involving the State of Maine',
'type': 'Data Breach',
'vulnerability_exploited': 'MOVEit file transfer tool'}