Incident

Maine government reports MOVEit related data breach of multiple departments


Learn More

The state of Maine has reported a significant data breach affecting over 1.3 million individuals, roughly the equivalent to the state's entire population. This breach was part of an international cybersecurity breach that exploited vulnerabilities in the MOVEit file-transfer software used by the state government.

Maine’s response to the breach included shutting down internet access to the compromised server, implementing security patches, and seeking assistance from cybersecurity experts and legal counsel.

Potentially compromised information includes

  • Social Security numbers,
  • dates of birth,
  • driver’s license numbers,
  • health, and medical information.

The affected departments include

  • Health and Human Services,
  • Education,
  • the Office of the Controller,
  • Workers’ Compensation,
  • Bureau of Motor Vehicles,
  • Corrections,
  • Economic and Community Development,
  • Human Resources,
  • Professional and Financial Regulation,
  • Unemployment Compensation.

The breach occurred on May 28 and 29, but it was not until an assessment was completed months later that the state began notifying individuals through press releases, mail, and email.

The state has set up a dedicated website and call center to keep residents informed and to assist them in determining if their information was affected. Additionally, Maine will provide free credit monitoring for those impacted.

Maine government reports MOVEit related data breach of multiple departments