Consumer loan company TMX Finance has recently disclosed a data breach impacting over 4.8 million customers of its services, which include TitleMax (title lending services), TitleBucks (car title loans), and InstaLoan (fast-approval personal loan services). The attack was identified on February 13th, 2023, and the attackers accessed their systems in December 2022.
The compromised personal information includes names, addresses, phone numbers, email addresses, birth dates, driver’s license and passport numbers, ID numbers, Social Security numbers, tax identification numbers, and/or financial account details. TMX Finance has taken steps to contain the incident, such as rotating all employee passwords and informing law enforcement, but the company has not revealed how the intruders gained access to their systems and whether ransomware was used in the attack.
As a result of the data breach, TMX Finance is facing a class action lawsuit and affected individuals are advised to be vigilant of any suspicious activity, as stolen personal information is often used in phishing attacks. The company has sent out notification letters to the affected individuals, and the Maine Attorney General’s Office have received a copy of the letter.
In conclusion, TMX Finance has experienced a data breach that impacted more than 4.8 million customers of their services. The company is facing a class action lawsuit and has taken steps to contain the incident, but has yet to reveal how the attack was conducted.
Key Points:
-TMX Finance’s data breach impacted over 4.8 million customers
-The attackers accessed the systems in December 2022
-Compromised personal information includes names, addresses, phone numbers, email addresses, birth dates, driver’s license and passport numbers, ID numbers, Social Security numbers, tax identification numbers, and/or financial account details
-TMX Finance has taken steps to contain the incident
-The company is facing a class action lawsuit
-Stolen personal information is often used in phishing attacks