HackingIdentity (basic)Government IDMediumContained

TruView BSI, LLC

bd_7073bafddeb01a8b · schema v1 · pii pii-v2

Severity

Medium

Discovered

Mar 4, 2026

Filed

Apr 8, 2026

To disclose

5 weeks

Affected

11state residents only

Linked

11 filings

Confidence

65%

Full breach record for TruView BSI, LLC →

TruView BSI, LLC notified Montana and other state residents of a cyber incident occurring between July 18, 2024, and August 15, 2024. Unauthorized access was confirmed on March 4, 2026. The incident potentially involved names and government identifiers (SSN, DOB, driver's license). TruView engaged law enforcement and forensic specialists, implemented additional security measures, and provided 12 months of free credit monitoring. Approximately 8 Rhode Island residents were specifically identified.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 594 days

discovery → filing · 5 weeks / 35 days

Jul 18, 2024

Begins

Mar 4, 2026

Discovered

Apr 8, 2026

Filed

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_100e3ab1dcfe43d72026-04-08Verified
New Hampshire State AGbd_237e3861bd6707ec2026-04-08Verified
Maine State AGbd_57ee6f370e12158f2026-04-08Candidate
Indiana State AGbd_603426b8ed7575162026-04-08Verified

Show 6 more filings ↓up to 7d gap

Indiana State AGbd_98f9346a5ec5a3622026-04-08Verified
California State AGbd_be944b818dd99f1d2026-04-08Verified
Nebraska State AGbd_e5ec9f37dc5f12e72026-04-08Verified
Vermont State AGbd_f15019926a830fbb2026-04-08Verified
Texas State AGbd_0ad7bd4a51b2dd7a2026-04-10 · +2dVerified
Maine State AGbd_bfe318d89f5898ef2026-04-15 · +7dCandidate

Name: TruView BSI, LLC
norm: truview bsi
Domain: truviewbsi.com

Name: TruView BSI, LLC
norm: truview bsi
Domain: truviewbsi.com

Discovered: Mar 4, 2026
Breach occurred: Jul 18, 2024 – Aug 15, 2024
Undetected for: 594 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 8, 2026
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Notifying law enforcement
Working with third-party cybersecurity specialists to conduct a forensic investigation
Conducted a comprehensive review of the impacted files
Moved to close off its environment
Implemented additional cybersecurity measures related to data privacy and security
Changes made: Providing you with access to Single Bureau Credit Monitoring/ Single Bureau Credit Report/ Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Massachusetts State AGApr 8 · first

New Hampshire State AGApr 8 · first

Maine State AGApr 8 · first

Indiana State AGApr 8 · first

California State AGApr 8 · first

Nebraska State AGApr 8 · first

Vermont State AGApr 8 · first

Montana State AGApr 8 · first · this page

Texas State AG+2d

Maine State AG+7d

Pattern: first filing Apr 8 (MA), last Apr 15 (ME) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2026/09/Consumer-notification-letter-6.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 8, 2026
Raw hash: 68c0e129a99643370ab161578a4653cef8a85aecf4a630abd427295aadd415e8

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityTruView BSI, LLC

Victim entityTruView BSI, LLC

Incidentdiscovered Mar 4, 2026

Stated responseNotifying law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov