DataBreachInformation.com
Received a VRChat, Inc. notification letter? Read the letter guide
MonitoringMaine AG filing · June 10, 2026

VRChat Reports Data Breach to Maine Attorney General

VRChat, Inc. filed a data breach notification with the Maine Attorney General on June 10, 2026. The incident involved the exposure of various user data points for individuals on its social virtual reality platform. Affected users are advised to take general protective measures to safeguard their online presence.

State
Maine
Reported
June 10, 2026

What may have been exposed

  • Full Name
  • Email Address
  • Password or Credential Hash
  • Mailing Address
  • Billing Details
  • Payment Card Information
  • Device and IP Connection Logs
  • User Profile and Account Metadata

VRChat, Inc., the operator of a prominent social virtual reality platform, submitted a data breach filing to the Maine Attorney General on June 10, 2026. The specific details regarding the breach type were not disclosed in the public filing, but such incidents typically involve unauthorized access to user data stored on company systems.

Online platforms like VRChat, which facilitate user interaction and account management, collect and store a range of personal information. The security incident highlights the persistent challenges in protecting large-scale user databases and cloud infrastructure from cyber threats. Official reports indicate that the company's investigation into the matter is ongoing.

The data categories reportedly exposed in this incident include Full Name, Email Address, Password or Credential Hash, Mailing Address, Billing Details, Payment Card Information, Device and IP Connection Logs, and User Profile and Account Metadata. The exposure of such information can increase the risk of targeted phishing attempts, account takeover, and other forms of digital fraud.

For those affected by the VRChat data breach, it is crucial to remain vigilant. We recommend changing passwords for your VRChat account and any other online services where you may have used the same or similar credentials. Enabling multi-factor authentication (MFA) on all available accounts provides an additional layer of security.

Regularly monitor your online accounts for any suspicious activity. Be cautious of unsolicited emails or communications that claim to be from VRChat or other services, as these could be phishing attempts designed to trick you into revealing more personal information. It is always best to directly visit the official website for any account changes or communications.

This information is compiled from VRChat, Inc.'s official filing with the Maine Attorney General. Individuals who receive a direct notification from VRChat, Inc. should review it carefully for any specific instructions or details relevant to their situation.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Secure your online accounts

    Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Maine Attorney General filing

Related data breach cases

Browse all Maine data breachesView the full case directory