HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
TMX Finance Family of Companies
bd_2eced1a90f9aa607 · schema v1 · pii pii-v1
Full breach record for TMX Finance Family of Companies →TMX Finance LLC (TitleMax, TitleBucks, InstaLoan) disclosed a data breach affecting customer personal information. Suspicious activity was detected on February 13, 2023, with unauthorized access occurring between December 2022 and February 2023. The breach involved identity data (names, SSNs, DOBs, driver's licenses). TMX contained the breach, engaged forensic experts, notified law enforcement, reset passwords, and offered credit monitoring. This is a supplemental notice, specifically highlighting Rhode Island residents.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed93 affectedView incident
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/09/TMX-Finance-Sample-Copy-of-Individual-Notice-L01.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2023
- Raw hash
- 49a4bf8501fbbc05ee5bb53a3cc95540bc7b89a46a1402629d5474a7067e0ea1
Reporting entity
- Name
- TMX Finance Family of Companiesnorm: tmx finance family of companies
- Domain
- tmxfinancefamily.com
Victim entity
- Name
- TMX Finance Family of Companiesnorm: tmx finance family of companies
- Domain
- tmxfinancefamily.com
Incident
- Discovered
- Feb 13, 2023
- Materiality determined
- —
- Notification sent
- Mar 30, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- law enforcement was notified
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 weeks(191 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.