Unknown threat actors submitted fraudulent data breach notifications to Maine’s official Attorney General portal, impersonating VRChat and Discord to fabricate incidents affecting millions of users. The portal publishes filings immediately with no identity verification, authentication, or validation, making government regulatory infrastructure a misinformation weapon against corporate reputations. No systems were technically compromised; the vulnerability is a process and design gap that any actor can exploit at negligible cost.