True World Holdings LLC, a prominent seafood wholesaler, experienced a significant data breach on August 23, 2024. The breach involved unauthorized actors accessing and copying files from the company’s network. These files contained sensitive personal information of employees and former employees, including Social Security numbers (SSNs), financial account details, and driver’s license information.
The breach affected a total of 8,532 individuals across the United States. Among those impacted, 169 individuals were residents of Massachusetts.
The incident was disclosed to various state attorney general offices, with the Maine Attorney General's office being informed on October 18, 2024, the California Attorney General's office on November 1, 2024, and the Massachusetts Attorney General's office also on November 1, 2024.
The company has not yet disclosed how the breach occurred beyond confirming that files were copied by unauthorized actors. The investigation into the breach is ongoing, and further details may emerge as the company continues its review of the incident.
In response to the breach, True World Holdings LLC took immediate action by launching a comprehensive investigation. They engaged an independent forensic consulting team to assess the scope and nature of the incident. The company has also been working to identify vulnerabilities in its systems and implement remedial measures to prevent future incidents.
To support affected individuals, True World Holdings LLC is offering 12 months of complimentary identity monitoring services through Kroll, a leading risk mitigation and response provider. These services include credit monitoring, fraud consultation, and identity theft restoration. Impacted individuals are encouraged to activate these services by visiting Kroll’s enrollment page and using the membership number provided in their notification letter.
If you believe you may have been affected by this data breach, it is important to take proactive steps to protect your personal information. Here are some recommended actions:
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.