We Didn’t Have a Data Breach. The Internet Disagreed.

VRChat was the subject of a fraudulent data-breach notice submitted to the Maine Attorney General’s public portal. The notice—on fake letterhead with incorrect contact details—was posted without VRChat’s knowledge, triggered media coverage and social outrage, and forced VRChat to spend significant resources responding; the Maine AG temporarily took down the public breach submission tool to prevent further fraudulent postings.