The government of Maine has confirmed over a million state residents had personal information stolen in a data breach earlier this year by a Russia-linked ransomware gang.
In a statement published Thursday, the Maine government said hackers exploited a vulnerability in its MOVEit file-transfer system, which stored sensitive data on state residents. The hackers used the vulnerability to access and download files belonging to certain state agencies between May 28 and May 29, the statement read.
The Maine government said it was disclosing the incident and notifying affected residents as its assessment of the impacted files “was recently completed.”
Maine said that the stolen information may include a person’s name, date of birth, Social Security number, driver’s license and other state or taxpayer identification numbers. Some individuals had medical and health insurance information taken.
The statement said the state holds information about residents “for various reasons, such as residency, employment, or interaction with a state agency,” and that the data it holds varies by person.