State of Maine Becomes Latest MOVEit Victim to Surface

State of Maine Becomes Latest MOVEit Victim to Surface

November 10, 2023 at 02:16PM

A group of cybercriminals exploited a vulnerability in the MOVEit file-transfer tool, gaining access to files belonging to the State of Maine. The breach exposed information on 1.3 million individuals, including names, Social Security numbers, dates of birth, and more. The state has implemented security measures and is offering credit monitoring and identity theft protection services to affected individuals. This incident is part of a larger string of MOVEit attacks affecting various organizations. Governments must prioritize data security to protect their citizens.

Meeting Notes Summary:
– The government of Maine has confirmed that cybercriminals exploited a vulnerability in the MOVEit file-transfer tool to access files belonging to the State of Maine between May 28 and 29.
– The breach was limited to Maine’s MOVEit server and did not affect any other networks or systems belonging to the state.
– Information on 1.3 million individuals may have been exposed, including names, SSNs, dates of birth, driver’s license numbers, taxpayer identification numbers, medical information, and health insurance information.
– Once the breach was discovered, the state blocked Internet access from the MOVEit server and implemented security measures as directed by Progress Software. They also launched an investigation with legal counsel and cybersecurity experts.
– The state has become the latest target in a series of MOVEit attacks affecting organizations like Shell and Gen Digital.
– Individuals affected by the breach can contact Maine’s call center to find out if their data was impacted. They will be offered two years of credit monitoring and identity theft protection services if their SSN or taxpayer identification number was involved.
– The state is currently notifying affected individuals through various channels, including emails and letters by mail.
– It is important for individuals to remain vigilant by regularly reviewing accounts and monitoring credit reports for suspicious activity.
– Governments have a responsibility to secure the data of their residents and should prioritize adopting cutting-edge technologies and proactive strategies.

Please let me know if there’s anything elseyou would like me to include or clarify.

Full Article