The state of Maine is in the process of notifying individuals whose personal data was compromised in a data breach that affected up to 1.3 million people. The breach was the result of hackers exploiting a vulnerability in a widely used file-transfer software, impacting not only individuals but also government agencies, pension funds, and private businesses. The compromised data could include sensitive information such as date of birth, driver’s license numbers, social security numbers, and health and medical information. The state has taken steps to address the vulnerability, engage with experts and legal counsel, and conduct thorough evaluations in the wake of the breach. A dedicated website has been established for those seeking more information.
The state has established a hotline for individuals to check whether their critical information was accessed and is offering free credit monitoring for those affected for a period of two years. Several state departments, agencies, and divisions were impacted to varying degrees, with the Department of Health and Human Services being the most heavily affected. The Department of Education, administrative and financial services, the Department of Corrections, and other state entities were also impacted by the breach. Some departments had fewer than 10 people affected by the incident, while others experienced a broader impact.
The breach has underscored the vulnerability of personal data and the need for heightened security measures to protect against such cyberattacks in the future. The state is taking steps to address this issue and provide support for those affected by the breach.