The Maine Attorney General's Office reported a data breach involving Data Media Associates (DMA) on August 23, 2023. The breach occurred on June 30, 2023, due to unauthorized access related to a vulnerability in the MOVEit secure file transfer solution, affecting 131 Maine residents. Compromised information included names, addresses, and health insurance information, including health insurance ID numbers.

The Maine Office of the Attorney General disclosed a data breach affecting Data Media Associates, LLC (DMA) on September 25, 2023, stemming from a MOVEit software exploit between May 31 and June 1, 2023. The incident compromised personal information of 98,496 individuals, including 133 Maine residents, with Social Security numbers (SSNs) among the exposed data. SSNs are highly sensitive identifiers, making affected individuals vulnerable to identity theft, financial fraud, and long-term reputational harm. DMA responded by offering 12 months of identity theft protection services via IDX to mitigate risks for victims. The breach highlights vulnerabilities in third-party software (MOVEit), a critical tool for secure file transfers, and underscores the cascading risks when such systems are exploited. The scale of the breach—nearly 100,000 records—suggests systemic exposure, with potential downstream effects like fraudulent account openings, tax fraud, or targeted phishing attacks leveraging the stolen SSNs. The incident aligns with broader trends of supply-chain attacks, where attackers exploit trusted vendor software to infiltrate multiple organizations simultaneously.