VRChat, Inc. reported an external system breach (hacking) affecting approximately 2.4 million users, including 8,607 Maine residents. Unauthorized access occurred between May 10 and May 12, 2026. Impacted data included usernames, email addresses, subscription status, login history, and linked Steam/Meta IDs. Passwords and payment information were not compromised. VRChat contained the access, engaged forensic experts, and implemented enhanced security controls. Consumer notifications were sent on June 12, 2026.
Affected (this filing): 2,436,782