MalwareFinancial ServicesFinanceRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

TMX Finance Corporate Services, Inc.

bd_468db14b4701e66a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2023

Filed

Mar 30, 2023

To disclose

6 weeks

Affected

571state residents only

Linked

8 filings

Confidence

69%

Full breach record for TMX Finance Corporate Services, Inc. →2 incidents on file

TMX Finance Corporate Services, Inc. filed a supplemental notice with the Washington AG regarding a cyberattack. The incident, detected on Feb 13, 2023, involved malware and affected 571 Washington residents. Data exposed included names, SSNs, driver's licenses, and financial account info. TMX retained forensic experts, notified the FBI, contained the breach, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d6 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 65 days

discovery → filing · 6 weeks / 45 days

Dec 10, 2022

Begins

Feb 13, 2023

Discovered

Mar 30, 2023

Filed

vs. sector median

2 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Vermont State AGbd_14539223f1a1ef972023-03-30Verified
California State AGbd_2847abc13900a9d12023-03-30Verified
Delaware State AGbd_489f453708ea6cf12023-03-30Verified
Massachusetts State AGbd_69ec99d595e924a42023-03-30Verified

Show 3 more filings ↓

Montana State AGbd_b3ab13fb7ab5cf4f2023-03-30Verified
New Hampshire State AGbd_cc20dd88b5a827d72023-03-30Verified
Indiana State AGbd_cfa6a131cc9a55b02023-03-30Verified

Name: Bradley Arant Boult Cummings LLP
norm: bradley arant boult cummings

Name: TMX Finance Corporate Services, Inc.
norm: tmx finance corporate
Industry: Financial Servicesllm

Discovered: Feb 13, 2023
Breach occurred: Dec 10, 2022 – Mar 17, 2023
Undetected for: 65 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 23, 2023
Affected individuals: 571state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthMilitary ID numberPassport number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement (FBI)

During the incident: Retained global forensic cybersecurity experts
Notified law enforcement (FBI)
Contained and eliminated the unauthorized activity on our systems
Continue to monitor our systems for any suspicious activity
Implemented additional security features, such as additional endpoint protection and monitoring
Resetting all employee passwords
Offering complimentary credit monitoring and identity protection services through Experian IdentityWorks
Changes made: Implemented additional security features, such as additional endpoint protection and monitoring
Resetting all employee passwords
Continue to evaluate ways to further enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Vermont State AGMar 30 · first

California State AGMar 30 · first

Delaware State AGMar 30 · first

Massachusetts State AGMar 30 · first

Montana State AGMar 30 · first

New Hampshire State AGMar 30 · first

Indiana State AGMar 30 · first

Washington State AGMar 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA20493.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 30, 2023
Raw hash: 5359ab721a8e068169617048b5dc9e3eab2e163a788c2f65f02bfb8854b176b0

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityBradley Arant Boult Cummings LLP

Victim entityTMX Finance Corporate Services, Inc.

Incidentdiscovered Feb 13, 2023

Stated responseRetained global forensic cybersecurity experts

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com