HackingCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
TMX Finance Corporate Services, Inc.
bd_bd98a7f2a34d9a6c · schema v1 · pii pii-v1
Full breach record for TMX Finance Corporate Services, Inc. →TMX Finance Corporate Services, Inc. detected suspicious activity on February 13, 2023. Investigation revealed unauthorized access starting in early December 2022, with data potentially acquired between February 3-14, 2023. Personal information including names and potentially SSNs was impacted. The company contained the breach, reset passwords, and offered credit monitoring.
California clockDiscovered Feb 13, 2023 → Notified Mar 30, 202345d ✓ CA 60-day OK27 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_28437012cc84b195Maine State AGfiled 2023-08-23Candidate
- bd_f6bc7e246106af87New Hampshire State AGfiled 2023-08-23Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-572306
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2023
- Raw hash
- a5b666415819abb54fae820fb43edd82d4a6c5dd0673f5930a3a58410c524f9b
Reporting entity
- Name
- TMX Finance Family of Companiesnorm: tmx finance family of companies
- Domain
- tmxfinancefamily.com
Victim entity
- Name
- TMX Finance Corporate Services, Inc.norm: tmx finance corporate
Incident
- Discovered
- Feb 13, 2023
- Materiality determined
- —
- Notification sent
- Mar 30, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 27 weeks(191 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 45d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 13, 2023→ Notified: Mar 30, 202345d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.