In April 2024, the Atlantic States Marine Fisheries Commission (ASMFC) fell victim to a ransomware attack executed by the 8Base ransomware group. The attackers successfully breached ASMFC’s systems, exfiltrating invoices and personal information before encrypting critical infrastructure. The group demanded a ransom in exchange for not publicly releasing the stolen data, while the attack disabled ASMFC’s email system, forcing the organization to establish temporary communication channels to maintain operations.The incident underscores the growing threat posed by ransomware groups like 8Base, which frequently target smaller government and maritime organizations with weaker cybersecurity defenses. While the full scope of the compromised personal data remains undisclosed, the breach disrupted administrative functions and exposed sensitive financial and personal records. The attack highlights vulnerabilities in public-sector cybersecurity, particularly in agencies managing environmentally critical operations like marine fisheries. The financial and reputational damage, combined with operational disruptions, positions this as a severe cybersecurity failure with broader implications for trust in governmental data protection.

On July 1, 2024, the Maine Office of the Attorney General reported that the Atlantic States Marine Fisheries Commission (ASMFC) experienced a data breach involving external system hacking that occurred between March 14, 2024, and April 6, 2024. This incident potentially affected 9,895 individuals, with 3,823 residents specifically impacted, and various personal information types may have been exposed. Identity theft protection services through IDX, A ZeroFox Company, were offered to the affected individuals.