1.3 Million Maine Residents Affected by Massive Data Breach in MOVEit File-Transfer System

Cyberattack exploited vulnerability in MOVEit file-transfer system, compromising personal data including names, Social Security numbers, and medical information; breach believed to be orchestrated by Russian ransomware group, impacting over 70 million people worldwide.

The data breach in Maine affected approximately 1.3 million people, nearly the entire population of the state, revealing a vulnerability in the widely used MOVEit file-transfer system.
The compromised data includes names, Social Security numbers, dates of birth, driver’s license or state identification numbers, taxpayer identification numbers, medical information, and health insurance information.
More than 50% of the data exposed in the breach came from Maine’s Department of Health and Human Services, while between 10% and 30% came from the state’s Department of Education.
Upon discovery of the breach, the state blocked internet access to and from the MOVEit server and implemented security measures recommended by the company that owns the tool.
The attack was reportedly orchestrated by a Russian ransomware group and has impacted more than 70 million people worldwide, affecting several other states and federal agencies in the U.S.
The state is offering two years of complimentary credit monitoring and identity theft protection services to any residents whose Social Security numbers or taxpayer numbers may have been compromised.