TechCrunch reports that more than a million Maine residents were confirmed by state government officials to have had their personal data compromised as part of the widespread MOVEit file transfer system hack conducted by the Cl0p ransomware operation.
Numerous state agencies have been infiltrated using the exploit between May 28 and 29, enabling threat actors to exfiltrate data, including names, birthdates, and Social Security numbers, as well as driver's license, state, and taxpayer identification numbers. Health insurance and medical information were also compromised from a selected number of individuals, according to the Maine government. Most of the stolen data was obtained from the state's Department of Health and Human Services and Department of Education.
More than 2,500 organizations have already been affected by the MOVEit hack, according to Emsisoft, which noted the Maine incident to be the 11th largest breach associated with the hack. Unlike other entities affected by the breach, Maine has not yet been included in Cl0p's leak site.
