Home / Technology / VRChat Denies Massive Data Exposure Claims
VRChat Denies Massive Data Exposure Claims
18 Jun
Summary
- VRChat denies a fabricated data breach notice affecting millions.
- The notice claimed user data exposure between May 10-12, 2026.
- Maine AG's office removed the fake notice after similar false reports.
Confusion arose following a government filing that alleged a major data security incident affecting VRChat users. The notice, published via the Maine Attorney General's office, claimed that data belonging to over 2.4 million users was exposed between May 10 and May 12, 2026, due to unauthorized cloud access.
VRChat has unequivocally refuted these claims, stating they have found no evidence of any system compromise or user data exposure. The company described the notice as entirely fabricated and misleading, emphasizing that the cited employee and email do not exist. VRChat is actively working with the Maine Attorney General's office to have the false report removed.
Further investigation revealed multiple issues with the fraudulent notice, including non-operational contact details. Intriguingly, the Office of the Maine Attorney General was forced to take its reporting portal offline after several fake disclosures, including one impersonating Discord, were submitted. This situation leaves a bizarre scenario where a government-published notice alleges a significant breach, while the company denies any attack occurred.
