Overview

• The data breach in Maine affected approximately 1.3 million people, nearly the entire population of the state, revealing a vulnerability in the widely used MOVEit file-transfer system.
• The compromised data includes names, Social Security numbers, dates of birth, driver’s license or state identification numbers, taxpayer identification numbers, medical information, and health insurance information.
• More than 50% of the data exposed in the breach came from Maine’s Department of Health and Human Services, while between 10% and 30% came from the state’s Department of Education.
• Upon discovery of the breach, the state blocked internet access to and from the MOVEit server and implemented security measures recommended by the company that owns the tool.
• The attack was reportedly orchestrated by a Russian ransomware group and has impacted more than 70 million people worldwide, affecting several other states and federal agencies in the U.S.
• The state is offering two years of complimentary credit monitoring and identity theft protection services to any residents whose Social Security numbers or taxpayer numbers may have been compromised.