Maine’s temporary shutdown of its breach-notification portal shows how disclosure systems can become an attack surface when provenance checks are too weak for the trust they carry.