HackingRetail & ConsumerRetailCapture Stored DataData ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIEMPLOYMENTLowContained
True World Holdings LLC
bd_93bf87adec4e262f · schema v1 · pii pii-v1
Full breach record for True World Holdings LLC →On August 23, 2024, True World Holdings LLC identified unusual activity involving certain systems and servers within its network. An independent forensic investigation determined that unauthorized actors copied files from the network containing employee and former employee personal information. 8,532 individuals were affected in total, with 1 Maine resident affected. Affected individuals were notified on October 18, 2024 and offered 12 months of identity monitoring through Kroll.
Maine clockDiscovered Aug 23, 2024 → Filed with AG Oct 18, 202456d ⏱ ME AG >30d8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_7f00a37f6749b470Leak Sitelynxfiled 2025-08-19(306d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a349c086-b4fd-474a-9da1-9c2f5b02a6ab.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2024
- Raw hash
- 3788d26816964ca32e5feaf1d1616c38cdf83bed975828d1beedb7a27e11c54f
Reporting entity
- Name
- True World Holdings LLCnorm: true world
- Domain
- trueworldgroup.com
- Industry
- Other Commercial
Victim entity
- Name
- True World Holdings LLCnorm: true world
- Domain
- trueworldgroup.com
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Aug 23, 2024
- Materiality determined
- —
- Notification sent
- Oct 18, 2024
- Affected individuals
- 1
- Data types
- PIIEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- ME AG >30d · 56d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 23, 2024→ Filed with AG: Oct 18, 202456d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.