TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC and its affiliates, many of which operate under the brands “TitleMax,” “TitleBucks,” and “InstaLoan” (collectively, “TMX”)

TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC and its affiliates, many of which operate under the brands “TitleMax,” “TitleBucks,” and “InstaLoan” (collectively, “TMX”) notified California AG on Mar 30, 2023 of a data breach, which occurred on Dec 10, 2022. Data exposed: Social Security number, Driver's license / state ID, Passport number, Financial / bank account, Date of birth, Email address, Tax ID / EIN / ITIN, Phone number, Postal address, Name.

All 5 filings by TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC and its affiliates, many of which operate under the brands “TitleMax,” “TitleBucks,” and “InstaLoan” (collectively, “TMX”), state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization: TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC and its affiliates, many of which operate under the brands “TitleMax,” “TitleBucks,” and “InstaLoan” (collectively, “TMX”)
Source: California AG · source record
Date reported: Mar 30, 2023
Date(s) of breach: Saturday, December 10, 2022
Residents affected: Not published by this source
Data exposed: Social Security number Driver's license / state ID Passport number Financial / bank account Date of birth Email address Tax ID / EIN / ITIN Phone number Postal address Name
Notice letter: Sample notice (PDF)
Discovered: Mar 1, 2023, as stated in the letter
"On March 1, 2023, the investigation confirmed that information may have been acquired between February 3, 2023 – February 14, 2023."
Days to notice: 29 days from discovery (Mar 1, 2023) to the California record (Mar 30, 2023). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82).
Offered in the letter: 12 months of credit or identity monitoring through Experian
First seen by BreachTally: 2026-10-30 16:00 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC and its affiliates, many of which operate under the brands “TitleMax,” “TitleBucks,” and “InstaLoan” (collectively, “TMX”)

Organization	Source	State	Reported	Residents affected	Data exposed
TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC & affiliates	Oregon DOJ	OR	Aug 23, 2023	4,895,817	Not stated
TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC and its affiliates, many of which operate under the brands “TitleMax,” “TitleBucks,” and “InstaLoan” (collectively, “TMX”).	California AG	CA	Aug 23, 2023	Not published	In the letter (PDF)
TMX Finance Corporate Services, Inc., on behalf of itself, its parent TMX Finance LLC & affiliates	Oregon DOJ	OR	Mar 30, 2023	4,822,580	Not stated
TMX Finance Corporate Services, Inc., on behalf of itself, its parent company TMX Finance LLC and its affiliates under brands “Title Max,” “Title Bucks,” and “InstaLoan.” (Collectively “TMX”)	Delaware DOJ	DE	Mar 30, 2023	10,522	Social Security numberDriver's license / state IDPassport numberFinancial / bank account+6

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.