HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
TMX Finance Corporate Services, Inc.
bd_2847abc13900a9d1 · schema v1 · pii pii-v1
Full breach record for TMX Finance Corporate Services, Inc. →TMX Finance Corporate Services, Inc. detected suspicious activity on February 13, 2023. Investigation revealed unauthorized access starting in early December 2022, with data potentially acquired between February 3 and February 14, 2023. Affected data includes names, SSNs, driver's license numbers, passport numbers, and financial account information. The incident has been contained. TMX engaged forensic experts, notified the FBI, reset employee passwords, and implemented additional endpoint protection. Complimentary credit monitoring is offered to affected individuals.
California clockDiscovered Feb 13, 2023 → Notified Mar 30, 202345d ✓ CA 60-day OK6 weeks discovery → filing
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_14539223f1a1ef97Vermont State AGfiled 2023-03-30Verified
- bd_1dcc954f0889a511Delaware State AGfiled 2023-03-30Candidate
- bd_468db14b4701e66aWashington State AGfiled 2023-03-30Verified
- bd_489f453708ea6cf1Delaware State AGfiled 2023-03-30Verified
Show 2 more filings ↓Show fewer ↑
- bd_b3ab13fb7ab5cf4fMontana State AGfiled 2023-03-30Verified
- bd_cc20dd88b5a827d7New Hampshire State AGfiled 2023-03-30Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-564929
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 30, 2023
- Raw hash
- 6f4f460f7cf8612439bfae4ea1b569fe49601228d3656605a11e350051f85f92
Reporting entity
- Name
- TMX Finance Family of Companiesnorm: tmx finance family of companies
- Domain
- tmxfinancefamily.com
Victim entity
- Name
- TMX Finance Corporate Services, Inc.norm: tmx finance corporate
Incident
- Discovered
- Feb 13, 2023
- Materiality determined
- —
- Notification sent
- Mar 30, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the FBI
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 45d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 13, 2023→ Notified: Mar 30, 202345d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.