Attackers submitted false data breach notifications to Maine’s official breach notification portal, which were automatically published before verification. Multiple companies subsequently had to issue public denials of the fake breach claims. This represents a novel abuse of trusted government infrastructure for spreading misinformation.

Why it matters in Western Canada: Canadian organizations may face similar risks if provincial breach notification portals lack sufficient verification controls. Western Canadian entities should review their own breach notification processes and verify any third-party disclosures directly.

---

Summary generated from the original advisory. Read the full source: bleepingcomputer