HackingCapture Stored DataData ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIEMPLOYMENTLowContained
True World Holdings LLC
bd_dc0591560ab9284f · schema v1 · pii pii-v1
Full breach record for True World Holdings LLC →On August 23, 2024, True World Holdings LLC identified unusual activity on certain systems and servers within its network. An independent forensic investigation determined that unauthorized actors copied files from the network, potentially containing personal information of True World employees and former employees. A total of 8,532 individuals were affected, including 4 Maine residents. Notifications were sent on November 1, 2024. Kroll identity monitoring services were offered for 12 months.
Maine clockDiscovered Aug 23, 2024 → Filed with AG Nov 1, 202470d ⏱ ME AG >30d10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ae5c3b45-99a8-4dc1-b374-c70cffee3d46.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 1, 2024
- Raw hash
- 7049ea4eaf228300692979a0f674501f00bea1a4b2034d9ec2b0e1eb396416ee
Reporting entity
- Name
- True World Holdings LLCnorm: true world
- Domain
- trueworldgroup.com
- Industry
- Other Commercial
Victim entity
- Name
- True World Holdings LLCnorm: true world
- Domain
- trueworldgroup.com
- Industry
- Other Commercial
Incident
- Discovered
- Aug 23, 2024
- Materiality determined
- —
- Notification sent
- Nov 1, 2024
- Affected individuals
- 4
- Data types
- PIIEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- ME AG >30d · 70dME resident >60d · 70d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 23, 2024→ Filed with AG: Nov 1, 202470d 30 days (soft) ME AG >30d Maine Discovered: Aug 23, 2024→ Notified: Nov 1, 202470d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.