TLDR Tech / InfoSec
VRChat says somebody faked a breach notice with the Maine AG's office
Maine's AG site published a fake VRChat breach notice that named a non-existent employee and listed a dead phone line, prompting VRChat to deny any compromise and contact the AG to remove it. The bogus filing claimed access to cloud data for roughly 2.4 million users, including usernames, emails, login histories, and platform IDs, but not passwords or payment data.
Read the full story