Maine (state in the United States)

2023: Hackers hacked and stole data from institutions of almost the entire state

On November 9, 2023, the authorities of the US state of Maine reported a large-scale cyber attack, during which a huge amount of personal data was in the hands of the attackers. It is said that cybercriminals stole information about about 1.3 million citizens, that is, almost the entire population of the state was affected.

The invasion was carried out on May 28-29, 2023. Hackers took advantage of the zero-day vulnerability in the MOVEit Transfer secure file transfer platform. The developer of this system, Progress Software Corporation, released a fix for the hole, but Maine's IT systems were unprotected at the time of the attack.

Camden, Maine

In the hands of cybercriminals were such information about citizens as name, social security number, date of birth, driver's license, state identification number and taxpayer identification number. In addition, medical information, including health insurance information, has been stolen in some cases. About half of all data stolen is from the Maine Department of Health and Human Services. Another third is information from the bases of the Department of Education. In addition, other government departments are affected, which include the Bureau of Motor Vehicles and the Department of Corrections.

The official notice says that after identifying the attack, the authorities blocked access to MOVEit servers and took the protection measures recommended by Progress Software. In addition, third-party experts have been involved in the investigation of the incident. cyber security Maine will provide two years of free credit monitoring and identity theft protection services to individuals whose Social Security numbers or taxpayer identification numbers were stolen by attackers.^[1]

Notes