Data Breach Notifications

Entity Information

  • Type of Organization: Financial Services
  • Entity Name: TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC and its affiliates, many of which operate under the brands “TitleMax,” “TitleBucks,” and “InstaLoan” (collectively, “TMX”).
  • Street Address: 15 Bull Street, Suite 200
  • City: Savannah
  • State, or Country if outside the US: United States
  • Zip Code: 31401

Submitted By

  • Name: Erin Illman
  • Title: Partner
  • Firm name (if different than entity): Bradley Arant Boult Cummings LLP
  • Telephone Number: 704.338.6026
  • Email Address:
  • Relationship to entity whose information was compromised: Counsel for TMX

Breach Information

  • Total number of persons affected (including residents): 4,895,817
  • Total number of Maine residents affected: 84
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified: No
  • Date(s) Breach Occured: 12/10/2022
  • Date Breach Discovered: 3/1/2023
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Financial Account Number or Credit/Debit Card Number (in combination with security code, access code, password or PIN for the account)

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 3/30/2023; 8/23/2023
  • Copy of notice to affected Maine residents: 2023-08-23 - TMX Finance - Sample Copy of Individual Notice (L01).pdf
  • Date of any previous (within 12 months) breach notifications: N/A
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 12 months, Experian, Experian IdentityWorks